R.A.M. Security Advisory – All versions of e107 have a vulnerability in the user.php file that allows malicious attackers the ability to post cross site scripting or html tags to a website for a member.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33410/e107.ramsa.txt
Source: https://packetstormsecurity.com/files/33410/e107.ramsa.txt.html