| Package | Affected versions | Patched versions |
|---|---|---|
| mybb | ≥ 1.8.0, < 1.8.20 | 1.8.20 |
A reflected XSS vulnerability in index.php in MyBB 1.8.x through 1.8.19 allows remote attackers to inject JavaScript via the 'upsetting[bburl]' parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free