MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-19202 - Vulnerability Database

MyBB

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-19202

Medium

Reference: CVE-2018-19202

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-19202

Title: MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

A reflected XSS vulnerability in index.php in MyBB 1.8.x through 1.8.19 allows remote attackers to inject JavaScript via the 39upsettingbburl39 parameter.