Description

Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via (1) a certain referrer field in usercp2.php, (2) a certain location field in inc/functions_online.php, and certain (3) tsubject and (4) psubject fields in moderation.php.

Remediation

References

CVE-2008-3966

Related Vulnerabilities

Jboss EAP Improper Handling of Exceptional Conditions Vulnerability (CVE-2018-8039)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Unspecified Vulnerability (2.1.3)

WordPress Plugin WP Job Manager Cross-Site Scripting (1.23.7)

WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.21)

MySQL CVE-2016-3501 Vulnerability (CVE-2016-3501)

Severity

Medium

Classification

CVE-2008-3966 CWE-707

Tags

Missing Update Known Vulnerabilities