exploitDog

CVE-2023-45556

Опубликовано: 06 нояб. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via the theme Name parameter in the theme management component.

Ссылки

https://github.com/Or4ngm4n/Mybb/blob/main/MyBB%201.8.33%20Cross%20Site%20Scripting.txt
Exploit
https://github.com/mybb/mybb/security/advisories/GHSA-4xqm-3cm2-5xgf
Patch
Third Party Advisory
https://raw.githubusercontent.com/Or4ngm4n/Mybb/main/Screenshot%202023-10-08%20012112.png
Product
https://github.com/Or4ngm4n/Mybb/blob/main/MyBB%201.8.33%20Cross%20Site%20Scripting.txt
Exploit
https://github.com/mybb/mybb/security/advisories/GHSA-4xqm-3cm2-5xgf
Patch
Third Party Advisory
https://raw.githubusercontent.com/Or4ngm4n/Mybb/main/Screenshot%202023-10-08%20012112.png
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*

Версия до 1.8.37 (исключая)

EPSS

Процентиль: 38%

0.00165

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

EPSS

Процентиль: 38%

0.00165

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79