Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MyBB Last User's Threads in Profile Plugin 1.2 Persistent XSS
Vulnerability Description
MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users visit the attacker's profile page.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
MyBB 跨站脚本漏洞
Vulnerability Description
MyBB（MyBulletinBoard）是MyBB团队的一套用PHP和MySQL开发的免费且基于Web的论坛软件。该软件具有简单易用、支持多国语言、可扩展等特点。 MyBB存在跨站脚本漏洞，该漏洞源于创建主题时未正确清理主题内容，可能导致攻击者通过主题字段注入恶意脚本。
CVSS Information
N/A
Vulnerability Type
N/A