Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86316
HistoryNov 24, 2022 - 12:00 a.m.

MyBB MyCode Editor Cross-Site Scripting Vulnerability

2022-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
mybb
mybulletinboard
php
mysql
cross-site scripting
vulnerability
user input
stored data
launch attacks

EPSS

0.001

Percentile

44.7%

MyBB (MyBulletinBoard) is a free and web-based forum software developed by MYBB team using PHP and MySQL. The software is easy to use, supports multiple languages, and is extensible. mybb MyBB versions prior to 1.8.32 have a cross-site scripting vulnerability that stems from the lack of checksum of user input or stored data in the visual MyCode editor, which can be exploited by attackers to launch cross-site scripting attacks.

EPSS

0.001

Percentile

44.7%

Related for CNVD-2022-86316