Unscored CVE-2018-19201 EUVD-2018-10910GHSA-fxv8-83r5-h3mq

A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'usern…

Published Mar 29, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter.

References

https://blog.mybb.com/2019/02/27/mybb-1-8-20-released-security-maintenance-release/
https://github.com/mybb/mybb/blob/feature/SECURITY.md#technical-details-of-known-issues