Description

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen.

Remediation

References

CVE-2018-6844

Related Vulnerabilities

Joomla! Core 3.x.x Security Bypass (3.7.0 - 3.8.11)

WordPress Plugin WooCommerce Possible Remote Code Execution (3.5.0)

WordPress Plugin Request a Quote Cross-Site Scripting (2.3.4)

WordPress Plugin Catchers Helpdesk and Ticket system for Support Cross-Site Scripting (1.0.3)

WordPress Plugin WP Mail Logging Cross-Site Scripting (1.11.1)

Severity

Medium

Classification

CVE-2018-6844 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities