← back
CVE-2018-14888

CVE-2018-14888

EPSS 3.7%
inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/148871/MyBB-Thank-You-Like-3.0.0-Cross-Site-Scripting.htmlunverifiedcve_referencewww.exploit-db.com/exploits/45178/unverifiedexploitdbwww.exploit-db.com/exploits/45178unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/148871/MyBB-Thank-You-Like-3.0.0-Cross-Site-Scripting.htmlhttps://community.mybb.com/mods.php?action=changelog&pid=360https://github.com/mybbgroup/MyBB_Thank-you-like-plugin/pull/199https://www.exploit-db.com/exploits/45178/