| Package | Affected versions | Patched versions |
|---|---|---|
| mybulletinboard | = 1.0.1= 1.0.2= 1.0_final= 1.0_pr2= 1.0_preview_release_2= 1.0_rc2= 1.0_rc4 |
Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as demonstrated by "javascript".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free