Description

Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs.

Remediation

References

CVE-2013-7288

Related Vulnerabilities

Apache Tomcat Improper Handling of Exceptional Conditions Vulnerability (CVE-2017-5664)

WordPress Plugin JH 404 Logger Cross-Site Scripting (1.1)

ReviveAdserver Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-7372)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0005)

WordPress Plugin WP Email Template HTML Injection (2.2.10)

Severity

Medium

Classification

CVE-2013-7288 CWE-707

Tags

Missing Update Known Vulnerabilities