Description

Multiple cross-site scripting (XSS) vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) portal.php and (2) inc/functions_post.php.

Remediation

References

CVE-2008-3069

Related Vulnerabilities

WordPress Plugin Justified Gallery Cross-Site Scripting (1.7.0)

WordPress Plugin Happy Addons for Elementor Pro Cross-Site Scripting (1.16.0)

Oracle Application Server Other Vulnerability (CVE-2007-0281)

WordPress Plugin Sermon Browser Multiple Cross-Site Scripting Vulnerabilities (0.45.15)

WordPress Plugin WP Forum Server Cross-Site Scripting and SQL Injection Vulnerabilities (1.7.3)

Severity

Medium

Classification

CVE-2008-3069 CWE-707

Tags

Missing Update Known Vulnerabilities