Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6wmh-3ww6-g2h7

Опубликовано: 23 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 6.1

Описание

MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget.

MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget.

EPSS

Процентиль: 8%
0.00029
Низкий

5.1 Medium

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
16 дней назад

MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget.

EPSS

Процентиль: 8%
0.00029
Низкий

5.1 Medium

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-79