← Database

CVE-2022-43708

MEDIUM CVSS: 6.1 Published: 2022-11-22 Modified: 2026-06-17

Description

MyBB 1.8.31 has a (issue 2 of 2) cross-site scripting (XSS) vulnerabilities in the post Attachments interface allow attackers to inject HTML by persuading the user to upload a file with specially crafted name

Affected Platforms

Mybb Mybb

Weakness Type

CWE-79, CWE-79

References