exploitDog

CVE-2022-43707

Опубликовано: 22 нояб. 2022

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

MyBB 1.8.31 has a Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor) allows remote attackers to inject HTML via user input or stored data

Ссылки

https://github.com/mybb/mybb/security/advisories/GHSA-6vpw-m83q-27px
Patch
Third Party Advisory
https://mybb.com
Product
https://github.com/mybb/mybb/security/advisories/GHSA-6vpw-m83q-27px
Patch
Third Party Advisory
https://mybb.com
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*

Версия до 1.8.32 (исключая)

EPSS

Процентиль: 42%

0.00199

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

CWE-79

EPSS

Процентиль: 42%

0.00199

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

CWE-79