MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-19049 - Vulnerability Database

MyBB

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-19049

Medium

Reference: CVE-2020-19049

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-19049

Title: MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the quotDescriptionquot field found in the quotAdd New Forumquot page by doing an authenticated POST HTTP request to 39/Upload/admin/index.phpmoduleforum-managementampactionadd39.