exploitDog

CVE-2022-28353

Опубликовано: 16 апр. 2023

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

In the External Redirect Warning Plugin 1.3 for MyBB, the redirect URL (aka external.php?url=) is vulnerable to XSS.

Ссылки

http://packetstormsecurity.com/files/171403/MyBB-External-Redirect-Warning-1.3-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://community.mybb.com/mods.php?action=view&pid=493
Vendor Advisory
http://packetstormsecurity.com/files/171403/MyBB-External-Redirect-Warning-1.3-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://community.mybb.com/mods.php?action=view&pid=493
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:external_redirect_warning_project:external_redirect_warning:1.3:*:*:*:*:mybb:*:*

EPSS

Процентиль: 64%

0.00461

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-jj3r-qhh5-gc2c

CVSS3: 6.1

github

почти 3 года назад

In the External Redirect Warning Plugin 1.3 for MyBB, the redirect URL (aka external.php?url=) is vulnerable to XSS.

EPSS

Процентиль: 64%

0.00461

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

CWE-79