2 matches found
CVE-2018-10365: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in the Threads to Link plugin 1.3 for MyBB. When editing a thread, the user is given the option to convert the thread to a link. The thread link input box is not properly sanitized...
5.4CVSS5.9AI score0.01495EPSS
SaveExploits3References2
PT-2018-9850
Name of the Vulnerable Software and Affected Versions: Threads to Link plugin version 1.3 for MyBB Description: A cross-site scripting XSS issue was found in the plugin. The issue arises when editing a thread and converting it to a link, as the thread link input box is not properly sanitized. Thi...
5.4CVSS5.5AI score0.01495EPSS
SaveExploits3References3
20