MyBB Upcoming Events Plugin 1.32 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB Upcoming Events Plugin 1.32 - Cross-Site Scripting Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=1231 Version: 1.32 Tested on: Ubuntu 18.04 CVE:...

Upcoming Events Cross-Site Scripting Vulnerability

MyBB MyBulletinBoard is MyBB team developed a set of PHP and MySQL development of free and Web-based forum software. The software is easy to use , multi-language support , scalable , etc. Upcoming Events plugin is used in which a schedule management plugin . A cross-site scripting vulnerability...

PT-2019-19776

Name of the Vulnerable Software and Affected Versions MyBB Upcoming Events plugin versions prior to 1.33 Description A cross-site scripting XSS issue was found in the upcoming events.php file of the Upcoming Events plugin for MyBB. This issue can be triggered by a crafted name for an event...