Description The installer in MyBB before 1.8.13 has XSS. Remediation References CVE-2017-16781 Related Vulnerabilities WordPress Plugin WP-DBManager 'wp-config.php' Arbitrary File Download (2.60) WebLogic Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2008-3257) WordPress Plugin Event Registration 'event_id' Parameter SQL Injection (5.32) WordPress Plugin Photoswipe Masonry Gallery Unspecified Vulnerability (1.2.17) WordPress Plugin LifterLMS-WP LMS for eLearning, Online Courses, & Quizzes Arbitrary File Write (3.37.14) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2017-16781