CVSS: 5.4EPSS: 1%CPEs: 1EXPL: 2CVE-2018-17128 – MyBB Visual Editor 1.8.18 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2018-17128
17 Sep 2018 — A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode. Se ha descubierto un problema de Cross-Site Scripting (XSS) persistente en Visual Editor en MyBB en versiones anteriores a la 1.8.19 mediante Video MyCode. MyBB Visual Editor versions 1.8.18 and below suffer from a cross site scripting vulnerability. • https://packetstorm.news/files/id/149469 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2018-10678
https://notcve.org/view.php?id=CVE-2018-10678
13 May 2018 — MyBB 1.8.15, when accessed with Microsoft Edge, mishandles 'target="_blank" rel="noopener"' in A elements, which makes it easier for remote attackers to conduct redirection attacks. MyBB 1.8.15, cuando se accede a él mediante Microsoft Edge, gestiona de manera incorrecta 'target="_blank" rel="noopener"' en elementos A, lo que facilita que atacantes remotos lleven a cabo ataques de redirección. • https://github.com/hbranco/CVE-2018-10678 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •