CVE-2014-3826

Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter…

published February 11, 2020

CVSS
—
EPSS
1%
Percentile
48.4
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in the edit action of the config-profile_fields module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00608 · 48.4th percentile
Published
2020-02-11T18:48Z
EPSS history
Timeline
  • 11 FEB 18:48Z
    Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter…
    cvelistv5