Description

Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2016-9419

Related Vulnerabilities

WordPress Plugin WordPress Facebook SQL Injection (1.0.13)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (4.5.5)

WordPress Plugin WP-Property-WordPress Powered Real Estate and Property Management Information Disclosure (1.38.3.2)

WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.1.5.2)

Oracle Database Server CVE-2018-3004 Vulnerability (CVE-2018-3004)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2016-9419