PT-2019-9758

Name of the Vulnerable Software and Affected Versions MyBB versions 1.8.x through 1.8.19 Description A reflected XSS issue allows remote attackers to inject JavaScript via the upsettingbburl parameter in the index.php file. Recommendations For MyBB versions 1.8.x through 1.8.19, update to a versi...

CVE-2018-19202: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability in index.php in MyBB 1.8.x through 1.8.19 allows remote attackers to inject JavaScript via the 'upsettingbburl' parameter...