CVE-2018-10365

CVE-2018-10365 affects the MyBB Threads to Link plugin for MyBB (v1.3). The vulnerability arises from improper sanitization of the Thread Link input during thread edits, enabling cross-site scripting (XSS). Connected sources confirm a persistent XSS PoC exists (Exploit-DB) and show a code fix sug...

MyBB Threads to Link Plugin 1.3 - Cross-Site Scripting

MyBB Threads to Link Plugin 1.3 - Cross-Site Scripting Exploit Title: MyBB Threads to Link Plugin v1.3 - Persistent XSS Date: 3/15/2018 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=1065 Version: v1.3...