ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-19048”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-19048
Published
2021-08-31
CVSS:
5.4
ShadowTrackr CVSS:
0.4
Summary:
Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'.