CVE-2018-19202

Affected software: MyBB 1.8.x up to 1.8.19. Vulnerability: reflected XSS in index.php via the upsetting[bburl] parameter. Root cause: improper handling of user-supplied input leading to JavaScript injection. Impact: remote attacker could inject JavaScript; CVSS3.0 base 6.1 (NETWORK, LOW ATTACK CO...