CVE-2019-3501: Improper Neutralization of Input During Web Page Generation

The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards page or in a user profile...

PT-2019-16603

Name of the Vulnerable Software and Affected Versions OUGC Awards plugin versions prior to 1.8.19 Description The issue allows for XSS attacks through a crafted award reason that is not properly handled on the awards page or in a user profile. Recommendations For versions prior to 1.8.19, update ...