Description MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen. Remediation References CVE-2018-6844 Related Vulnerabilities Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2019-10097) WordPress Plugin Migration, Backup, Staging-WPvivid SQL Injection (0.9.52) Apache HTTP Server Other Vulnerability (CVE-2001-0730) WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions Unspecified Vulnerability (2.10.5) MySQL CVE-2019-2627 Vulnerability (CVE-2019-2627) Severity Medium Classification CVE-2018-6844 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities