Description

Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."

Remediation

References

CVE-2011-5132

Related Vulnerabilities

Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4051)

WordPress Plugin Wufoo Shortcode Cross-Site Scripting (1.51)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9025)

Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-33338)

WordPress Plugin Integration for Contact Form 7 and Zoho Cross-Site Scripting (1.1.7)

Severity

Medium

Classification

CVE-2011-5132 CWE-707

Tags

Missing Update Known Vulnerabilities