Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-19048 - Vulnerability Database
MyBB

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-19048

Medium
Reference: CVE-2020-19048
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-19048
Title: MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the quotTitlequot field found in the quotAdd New Forumquot page by doing an authenticated POST HTTP request to 39/Upload/admin/index.phpmoduleforum-managementampactionadd39.