PT-2018-12811 · My Little Forum · My Little Forum

CVE-2018-14936

·

Published

2018-08-05

·

Updated

2024-02-14

CVSS v3.1

4.8

Medium

VectorAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions my little forum version 2.4.12
Description The issue allows for XSS via the Title field in the Add page option.
Recommendations For my little forum version 2.4.12, update to a version that fixes this issue, if available. As a temporary workaround, consider validating and sanitizing user input in the Title field to prevent XSS attacks.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-14936

Affected Products

My Little Forum