Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/04/04 3:30 p.m.•13 views

EUVD-2018-21751

MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments. Attackers can add crafted HTML and JavaScript payloads in the comment field that execute when other users view or edit...

6.4CVSS5.9AI score0.00254EPSS
SaveExploits1References4
NVD
NVD
•added 2026/04/04 2:16 p.m.•14 views

CVE-2018-25249

MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments. Attackers can add crafted HTML and JavaScript payloads in the comment field that execute when other users view or edit...

6.4CVSS0.00254EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/04/04 1:51 p.m.•38 views

CVE-2018-25249 MyBB My Arcade Plugin 1.3 Persistent XSS via Comment

MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments. Attackers can add crafted HTML and JavaScript payloads in the comment field that execute when other users view or edit...

6.4CVSS0.00254EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/04/04 1:51 p.m.•20 views

CVE-2018-25249 MyBB My Arcade Plugin 1.3 Persistent XSS via Comment

MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments. Attackers can add crafted HTML and JavaScript payloads in the comment field that execute when other users view or edit...

6.4CVSS5.9AI score0.00254EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/04/04 1:51 p.m.•8 views

CVE-2018-25249

MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments. Attackers can add crafted HTML and JavaScript payloads in the comment field that execute when other users view or edit...

6.4CVSS5.9AI score0.00254EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/04 12:00 a.m.•1 views

CVE-2018-25249: Improper Neutralization of Input During Web Page Generation

MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments. Attackers can add crafted HTML and JavaScript payloads in the comment field that execute when other users view or edit...

6.4CVSS5.8AI score0.00254EPSS
SaveExploits1References3
Rows per page
Query Builder