CVE-2018-11532

An issue was discovered in the ChangUonDyU Advanced Statistics plugin 1.0.2 for MyBB. changstats.php has XSS, as demonstrated by a subject field.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-05-29

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Changuondyu Advanced Statistics (Changuondyu Advanced Statistics Project)

References

• https://github.com/vintagedaddyo/MyBB_Plugin-ChangUonDyU-Advanced-Statistics/commit/8122c93f4c3b517b9d35338fe77ba91d9a6…
• https://www.exploit-db.com/exploits/44795/