Unscored CVE-2010-4522 EUVD-2010-4490GHSA-4frq-44vw-qmw2

Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to…

Published Dec 30, 2010 · Updated Sep 16, 2024 · Assigned by redhat

Description

Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) editpost.php, (2) member.php, and (3) newreply.php.

References

http://blog.mybb.com/2010/12/15/mybb-1-6-1-release-1-4-14-update/
[oss-security] 20101220 CVE Request: MyBB XSS bugs mailing-list
[oss-security] 20101221 Re: CVE Request: MyBB XSS bugs mailing-list