CVE-2018-19201

A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter

published March 29, 2019

CVSS
—
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00788 · 55.5th percentile
Published
2019-03-29T18:58Z
EPSS history
Timeline
  • 29 MAR 18:58Z
    A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter
    cvelistv5