CVE-2018-11532: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the ChangUonDyU Advanced Statistics plugin 1.0.2 for MyBB. changstats.php has XSS, as demonstrated by a subject field...