CVE-2014-3827: XSS
First published: Tue Feb 11 2020(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the title parameter in the (1) edit or (2) add action in the user-users module or the (3) finduser action or the name parameter in an (4) edit action in the user-user module or the (5) editprofile action to modcp.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mybb Mybb | <1.8.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2014-3827?
CVE-2014-3827 is a vulnerability in MyBB that allows remote authenticated users to inject arbitrary web script or HTML via certain parameters.
How can the vulnerabilities in MyBB be exploited?
The vulnerabilities in MyBB can be exploited by remote authenticated users to inject arbitrary web script or HTML.
What is the severity of CVE-2014-3827?
CVE-2014-3827 has a severity keyword of 'medium' with a severity value of 5.4.
How can I fix the vulnerabilities in MyBB identified in CVE-2014-3827?
To fix the vulnerabilities in MyBB, it is recommended to update to version 1.8.4 or later.
Where can I find more information about CVE-2014-3827?
More information about CVE-2014-3827 can be found on the MyBB blog and the Adam Ziaja website.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/event
- agent/author
- agent/description
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/mybb
- canonical/mybb mybb