CVE-2018-25116mediumCWE-79

MyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.1epss 0.3%

probabilidad de explotación

0.3%top 75% de las CVE

explotación observada

noninguna fuente lo reporta

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Productos afectados

jamiesage123 · MyBB Thread Redirect Plugin

Referencias

https://github.com/jamiesage123/Thread-Redirect https://www.exploit-db.com/exploits/49505 https://www.vulncheck.com/advisories/mybb-thread-redirect-plugin-cross-site-scripting