Description
Cross-site scripting (XSS) vulnerability in the quick edit function in xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the content of a post.
Remediation
References
Related Vulnerabilities
SharePoint CVE-2020-1338 Vulnerability (CVE-2020-1338)
WordPress Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-29447)
WordPress Plugin Rating-Widget:Star Review System Cross-Site Scripting (2.8.8)
Rukovoditel Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-11821)
WordPress Plugin WP Social Feed Gallery Unspecified Vulnerability (2.1.1)