CVE-2019-12830

In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to video BBCode persistent XSS to take over any forum account, aka a nested video MyCode issue...

CVE-2019-12830

CVE-2019-12830 affects MyBB releases before 1.8.21. A parsing flaw in the Private Message / Post renderer allows a crafted [video] BBCode to cause persistent XSS, enabling an attacker to take over a user’s forum account. The issue is described across multiple sources (NVD entry and Red Hat/CNVD v...

CVE-2019-12830: Improper Neutralization of Input During Web Page Generation

In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to video BBCode persistent XSS to take over any forum account, aka a nested video MyCode issue...

mybb -- vulnerabilities

mybb Team reports: High risk: Theme import stylesheet name RCE High risk: Nested video MyCode persistent XSS Medium risk: Find Orphaned Attachments reflected XSS Medium risk: Post edit reflected XSS Medium risk: Private Messaging folders SQL injection Low risk: Potential phar deserialization...

CVE-2018-17128

A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode...

Cross site scripting

A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode...

CVE-2018-17128

Summary: CVE-2018-17128 affects MyBB’s Visual Editor (pre-1.8.19). The issue is a persistent XSS introduced through the Video MyCode in posts, enabling attacker-controlled JavaScript execution in a victim’s browser when replying to a thread. The vulnerability is tied to the Video or videotype han...

CVE-2018-17128

A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode...

MyBB Cross-Site Scripting Vulnerability (CNVD-2018-19562)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is easy to use , multi-language support , scalable , etc. Visual Editor is one of the HTML editor component . A cross-site scripting vulnerability exists in Visual Editor in...

CVE-2018-17128: Improper Neutralization of Input During Web Page Generation

A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode...

mybb -- vulnerabilities

mybb Team reports: High risk: Image MyCode “alt” attribute persistent XSS. Medium risk: RSS Atom 1.0 item title persistent XSS...

FreeBSD : mybb -- vulnerabilities (bfd5d004-81d4-11e8-a29a-00e04c1ea73d)

mybb Team reports : High risk: Image and URL MyCode Persistent XSS Medium risk: Multipage Reflected XSS Low risk: ACP logs XSS Low risk: Arbitrary file deletion via ACP's Settings Low risk: Login CSRF Low risk: Non-video content embedding via Video MyCode C Tenable Network Security, Inc. The...

MyBB cross-site scripting vulnerability (CNVD-2017-06578)

MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A cross-site scripting vulnerability exists in the Email MyCode component in MyBB versions prior to 1.8.11. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Cross site scripting

In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...

CVE-2017-8103

In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...

CVE-2017-8103

In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...

CVE-2017-8103

Summary: CVE-2017-8103 affects MyBB prior to 1.8.11. The vulnerability is an XSS in the Email MyCode component that can be triggered by an onmouseover event. The issue is documented across multiple sources (e.g., NVD entry) and is specifically tied to versions before 1.8.11. Impact (as stated): C...

CVE-2017-8103

In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...

CVE-2017-8103: Improper Neutralization of Input During Web Page Generation

In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...

MyBB MyCode Module Cross-Site Scripting Vulnerability

MyBB is the very best international free forum software. MyBB MyCode module there is a station scripting vulnerability, an attacker can use the vulnerability in the published topic, in the content of the email=2 "onmouseover="alertdocument.locationhover me/email can be triggered by cross-site...