CVE-2018-14392 – MyBB New Threads Plugin 1.1 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2018-14392

The New Threads plugin before 1.2 for MyBB has XSS. El plugin New Threads en versiones anteriores a la 1.2 para MyBB tiene Cross-Site Scripting (XSS). MyBB New Threads plugin version 1.1 suffers from a cross site scripting vulnerability. • https://www.exploit-db.com/exploits/45057 https://community.mybb.com/mods.php?action=changelog&pid=1143 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •