MyBB Cross-Poster <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
mediumThe MyBB Cross-Poster WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/classes/MyBBXPSettings.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and i...
- CVSS:
- 5.5
- Affected:
- up to 1.0
- Fix:
- No patched version reported
- Disclosed:
- Oct 14, 2021