CVE-2020-19048

Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the "Add New Forum"…

published August 31, 2021

CVSS
—
EPSS
1%
Percentile
53.2
In the wild
Unconfirmed
What it is

Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00716 · 53.2th percentile
Published
2021-08-31T13:16Z
EPSS history
Timeline
  • 31 AUG 13:16Z
    Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the "Add New Forum"…
    cvelistv5