Description (CNA)
MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| jamiesage123 / MyBB Thread Redirect Plugin | affected 0.2.1 |
CWE
CWE-79
References
- https://www.exploit-db.com/exploits/49505
- https://github.com/jamiesage123/Thread-Redirect
- https://www.vulncheck.com/advisories/mybb-thread-redirect-plugin-cross-site-scripting
ADP enrichment
No English description supplied.
No references supplied.