CVE-2014-5248: XSS
Published Aug 14, 2014
·Updated
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to video MyCode.
Affected Software
15 affected components
Mybb Mybb<=1.6.14
Mybb Mybb=1.6.0
Mybb Mybb=1.6.1
Mybb Mybb=1.6.2
Mybb Mybb=1.6.3
Mybb Mybb=1.6.4
Mybb Mybb=1.6.5
Mybb Mybb=1.6.6
Mybb Mybb=1.6.7
Mybb Mybb=1.6.8
Mybb Mybb=1.6.9
Mybb Mybb=1.6.10
Mybb Mybb=1.6.11
Mybb Mybb=1.6.12
Mybb Mybb=1.6.13
Remediation
Event History
Aug 14, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-5248?
CVE-2014-5248 is classified as a medium severity Cross-site Scripting (XSS) vulnerability.
2
How do I fix CVE-2014-5248?
To fix CVE-2014-5248, upgrade MyBB to version 1.6.15 or later.
3
What versions of MyBB are affected by CVE-2014-5248?
CVE-2014-5248 affects MyBB versions prior to 1.6.15, specifically 1.6.0 to 1.6.14.
4
What type of vulnerability is CVE-2014-5248?
CVE-2014-5248 is a Cross-site Scripting (XSS) vulnerability that allows arbitrary web scripts to be injected.
5
Can CVE-2014-5248 be exploited remotely?
Yes, CVE-2014-5248 can be exploited remotely by attackers to inject malicious scripts.