Description

Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs.

Remediation

References

CVE-2016-9407

Related Vulnerabilities

Oracle HTTP Server Improper Privilege Management Vulnerability (CVE-2026-60454)

WordPress Plugin WordPress Leads Cross-Site Scripting (1.6.2)

MySQL CVE-2018-2573 Vulnerability (CVE-2018-2573)

WordPress Plugin WordPress Comment Rating Cross-Site Scripting (1.5.3)

WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.7)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2016-9407