Description

Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.

Remediation

References

CVE-2013-7275

Related Vulnerabilities

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2157)

WordPress Plugin LiveSig 'wp-root' Parameter Remote File Include (0.4)

WordPress Plugin WPeMatico RSS Feed Fetcher Cross-Site Scripting (2.6.11)

Grafana Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-13379)

WordPress Plugin Subscribe2 Cross-Site Scripting (10.15)

Severity

Medium

Classification

CVE-2013-7275 CWE-707

Tags

Missing Update Known Vulnerabilities