CVE-2018-6506

N/A

Beschreibung

Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht2/12/2018

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

minibb:minibb

Schwachen (CWE)

CWE-79

Referenzen

https://offensivehacking.wordpress.com/2018/02/07/minibb-forums-v3-2-2-stored-xss/(cve@mitre.org)

https://offensivehacking.wordpress.com/2018/02/07/minibb-forums-v3-2-2-stored-xss/(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.