CVE-2018-19201

CVE-2018-19201

EPSS 0.8%

A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://blog.mybb.com/2019/02/27/mybb-1-8-20-released-security-maintenance-release/https://github.com/mybb/mybb/blob/feature/SECURITY.md#technical-details-of-known-issues