Total vulnerabilities in the database
usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.
CVSS v3:
CVSS v2:
CWEs:
OWASP TOP 10: