CVE-2018-19201

CVE-2018-19201

EPSS 0.8%

A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://blog.mybb.com/2019/02/27/mybb-1-8-20-released-security-maintenance-release/https://github.com/mybb/mybb/blob/feature/SECURITY.md#technical-details-of-known-issues