CVE-2021-39338: Improper Neutralization of Input During Web Page Generation

The MyBB Cross-Poster WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /classes/MyBBXPSettings.php file which allowed attackers with administrative user access to inject arbitrary web scripts, i...

PT-2021-22544

Name of the Vulnerable Software and Affected Versions: MyBB Cross-Poster WordPress plugin versions up to and including 1.0 Description: The issue arises from insufficient input validation and sanitization via several parameters in the /classes/MyBBXPSettings.php file, allowing attackers with...

MyBB Cross-Poster <= 1.0 - Admin+ Stored Cross-Site Scripting

The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /classes/MyBBXPSettings.php file which allowed attackers with administrative user access to inject arbitrary web scripts. This affects multi-site...