Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h3wx-4w3j-grr9

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.7

Описание

In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to [video] BBCode persistent XSS to take over any forum account, aka a nested video MyCode issue.

In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to [video] BBCode persistent XSS to take over any forum account, aka a nested video MyCode issue.

EPSS

Процентиль: 57%
0.00348
Низкий

8.7 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.7
nvd
больше 6 лет назад

In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to [video] BBCode persistent XSS to take over any forum account, aka a nested video MyCode issue.

EPSS

Процентиль: 57%
0.00348
Низкий

8.7 High

CVSS3

Дефекты

CWE-79