Description

Cross-site scripting (XSS) vulnerability in member.php in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2015-2332

Related Vulnerabilities

PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-8387)

Joomla Improper Authentication Vulnerability (CVE-2022-23795)

Joomla! Core 3.x.x SQL Injection (3.0.0 - 3.4.6)

Oracle Database Server CVE-2015-4921 Vulnerability (CVE-2015-4921)

WordPress Plugin Kish Guest Posting 'uploadify.php' Arbitrary File Upload (1.2)

Severity

Medium

Classification

CVE-2015-2332 CWE-707

Tags

Missing Update Known Vulnerabilities