Lucene search
PRIOn knowledge basePRION:CVE-2018-10580HistoryMay 11, 2018 - 2:29 p.m.
Design/Logic Flaw
2018-05-1114:29:00
PRIOn knowledge base
www.prio-n.com
1
0.001 Low
EPSS
Percentile
44.7%
The “Latest Posts on Profile” plugin 1.1 for MyBB has XSS because there is an added section in a user profile that displays that user’s most recent posts without sanitizing the tsubject (aka thread subject) field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| latest_posts_on_profile | eq | 1.1 |
Related
nvd
nvd
CVE-2018-10580
2018-05-11 14:29:00
cvelist
cvelist
CVE-2018-10580
2018-05-11 14:00:00
zdt
zdt
MyBB Latest Posts on Profile Plugin 1.1 - Cross-Site Scripting Vulnerability
2018-05-10 00:00:00
cve
cve
CVE-2018-10580
2018-05-11 14:29:00
packetstorm
packetstorm
MyBB Latest Posts On Profile 1.1 Cross Site Scripting
2018-05-10 00:00:00
exploitdb
exploitdb
MyBB Latest Posts on Profile Plugin 1.1 - Cross-Site Scripting
2018-05-10 00:00:00
exploitpack
exploitpack
MyBB Latest Posts on Profile Plugin 1.1 - Cross-Site Scripting
2018-05-10 00:00:00