← back
CVE-2019-3501

CVE-2019-3501

EPSS 2.4%
The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards page or in a user profile.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/46080/unverifiedexploitdbwww.exploit-db.com/exploits/46080unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/Sama34/OUGC-Awards/issues/29https://github.com/Sama34/OUGC-Awards/pull/31https://www.exploit-db.com/exploits/46080/