MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2017-8103 - Vulnerability Database

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2017-8103

Medium

Reference: CVE-2017-8103

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-8103

Title: MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

In MyBB before 1.8.11 the Email MyCode component allows XSS as demonstrated by an onmouseover event.