Description
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Remediation
References
Related Vulnerabilities
WordPress Plugin YouSayToo auto-publishing 'submit' Parameter Cross-Site Scripting (1.0.1)
Internet Information Services Other Vulnerability (CVE-1999-1537)
WordPress Plugin All-in-One WP Migration Remote Code Execution (2.0.2)
MediaWiki Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-45363)
Liferay Portal Insecure Default Initialization of Resource Vulnerability (CVE-2024-25610)