Description

Cross-site scripting (XSS) vulnerability in the quick edit function in xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the content of a post.

Remediation

References

CVE-2015-4552

Related Vulnerabilities

WordPress Plugin Downloads Manager Arbitrary File Upload (1.0)

WordPress Plugin Placemarks Cross-Site Scripting (2.0.0)

Ruby Improper Input Validation Vulnerability (CVE-2009-4492)

WordPress Plugin Add Edit Delete Listing Module SQL Injection (1.0)

WordPress Plugin Amazon Tools Cross-Site Scripting (1.7.2)

Severity

Medium

Classification

CVE-2015-4552 CWE-707

Tags

Missing Update Known Vulnerabilities