PT-2018-9850
CVE-2018-10365
·
Published
2018-05-01
·
Updated
2018-06-05
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Threads to Link plugin version 1.3 for MyBB
Description:
A cross-site scripting (XSS) issue was found in the plugin. The issue arises when editing a thread and converting it to a link, as the thread link input box is not properly sanitized. This lack of sanitization can lead to potential XSS attacks.
Recommendations:
For version 1.3 of the Threads to Link plugin, consider disabling the thread conversion to link feature until a patch is available to properly sanitize the thread link input box.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾