Skip to content
OpenAdvisories
Unscored CVE-2014-3826 EUVD-2014-3764GHSA-89vm-68cf-8hfq

Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via…

Published Feb 11, 2020 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in the edit action of the config-profile_fields module.

References