CVE-2018-14724

In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the…

published March 18, 2019

CVSS
—
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00691 · 52.0th percentile
Published
2019-03-18T19:30Z
EPSS history
Timeline
  • 18 MAR 19:30Z
    In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the…
    cvelistv5