PT-2018-9850

CVE-2018-10365

·

Published

2018-05-01

·

Updated

2018-06-05

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Threads to Link plugin version 1.3 for MyBB
Description: A cross-site scripting (XSS) issue was found in the plugin. The issue arises when editing a thread and converting it to a link, as the thread link input box is not properly sanitized. This lack of sanitization can lead to potential XSS attacks.
Recommendations: For version 1.3 of the Threads to Link plugin, consider disabling the thread conversion to link feature until a patch is available to properly sanitize the thread link input box.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾