MyBB <= 1.8.20 Multiple XSS Vulnerabilities

MyBB is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

CVE-2020-19049

CVE-2020-19049 - MyBB 1.8.20 XSS . The vulnerability is a cross-site scripting flaw in the Description field of the Add New Forum page. An authenticated user can issue a POST to /Upload/admin/index.php?module=forum-management&action=add to inject arbitrary web script/HTML. Affected software: MyBB...