exploitDog

CVE-2021-27279

Опубликовано: 22 фев. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).

Ссылки

https://github.com/mybb/mybb/commit/cb781b49116bf5c4d8deca3e17498122b701677a
Patch
Third Party Advisory
https://github.com/mybb/mybb/security/advisories/GHSA-6483-hcpp-p75w
Exploit
Third Party Advisory
https://mybb.com/versions/1.8.25/
Release Notes
Vendor Advisory
https://github.com/mybb/mybb/commit/cb781b49116bf5c4d8deca3e17498122b701677a
Patch
Third Party Advisory
https://github.com/mybb/mybb/security/advisories/GHSA-6483-hcpp-p75w
Exploit
Third Party Advisory
https://mybb.com/versions/1.8.25/
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*

Версия до 1.8.25 (исключая)

EPSS

Процентиль: 59%

0.00379

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

EPSS

Процентиль: 59%

0.00379

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79