PT-2018-9850
CVE-2018-10365
·
تاريخ النشر
2018-05-01
·
تاريخ التحديث
2018-06-05
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Threads to Link plugin version 1.3 for MyBB
Description:
A cross-site scripting (XSS) issue was found in the plugin. The issue arises when editing a thread and converting it to a link, as the thread link input box is not properly sanitized. This lack of sanitization can lead to potential XSS attacks.
Recommendations:
For version 1.3 of the Threads to Link plugin, consider disabling the thread conversion to link feature until a patch is available to properly sanitize the thread link input box.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾