CVE-2018-25247

The CVE-2018-25247 entry concerns MyBB Like Plugin 3.0.0, which is vulnerable to cross-site scripting via user profiles. The root cause is unvalidated subject content in posts/threads, allowing an attacker to craft post subjects containing script tags that execute when other users view the attack...

CVE-2018-14575

Trash Bin plugin 1.1.3 for MyBB has cross-site scripting XSS via a thread subject and a cross-site request forgery CSRF via a post subject...

CVE-2018-14575

Trash Bin plugin 1.1.3 for MyBB has cross-site scripting XSS via a thread subject and a cross-site request forgery CSRF via a post subject...

PT-2019-9038

Name of the Vulnerable Software and Affected Versions Trash Bin plugin version 1.1.3 for MyBB Description The issue concerns cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. The XSS vulnerability can be triggered via a thread subject, while the CSRF vulnerability can ...

CVE-2018-14575: Improper Neutralization of Input During Web Page Generation

Trash Bin plugin 1.1.3 for MyBB has cross-site scripting XSS via a thread subject and a cross-site request forgery CSRF via a post subject...

CVE-2018-14888

inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject...

CVE-2018-14888: Improper Neutralization of Input During Web Page Generation

inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject...

PT-2018-12778

Name of the Vulnerable Software and Affected Versions Eldenroot Thank You/Like plugin versions prior to 3.1.0 Description The issue allows for XSS attacks via a post or thread subject, potentially affecting the security of the MyBB platform. Recommendations For versions prior to 3.1.0, update to...