Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:33 a.m.8 views

CVE-2024-52702

A stored cross-site scripting XSS vulnerability in the component install\index.php of MyBB v1.8.38 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Name parameter. NOTE: this is disputed by the Supplier because Website Name can only be set ...

5.4CVSS5.5AI score0.0025EPSS
Exploits1References1
NVD
NVD
added 2024/11/20 9:15 p.m.18 views

CVE-2024-52702

A stored cross-site scripting XSS vulnerability in the component install\index.php of MyBB v1.8.38 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Name parameter. NOTE: this is disputed by the Supplier because Website Name can only be set ...

5.4CVSS0.0025EPSS
Exploits1References2
OSV
OSV
added 2024/11/20 9:15 p.m.2 views

CVE-2024-52702

A stored cross-site scripting XSS vulnerability in the component install\index.php of MyBB v1.8.38 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Name parameter. NOTE: this is disputed by the Supplier because Website Name can only be set ...

5.4CVSS5.9AI score0.0025EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/11/20 12:0 a.m.9 views

CVE-2024-52702

A stored cross-site scripting XSS vulnerability in the component install\index.php of MyBB v1.8.38 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Name parameter. NOTE: this is disputed by the Supplier because Website Name can only be set ...

5.1AI score0.0025EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/11/20 12:0 a.m.13 views

CVE-2024-52702

A stored cross-site scripting XSS vulnerability in the component install\index.php of MyBB v1.8.38 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Name parameter. NOTE: this is disputed by the Supplier because Website Name can only be set ...

0.0025EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.3 views

PT-2024-35415

Name of the Vulnerable Software and Affected Versions MyBB version 1.8.38 Description A stored cross-site scripting XSS issue exists in the component installindex.php, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Name parameter. This...

5.4CVSS5.5AI score0.0025EPSS
Exploits1References7
Rows per page
Query Builder