CVE-2014-9241: XSS
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to report.php, (2) signature parameter in a doeditsig action to usercp.php, or (3) title parameter in the style-templates module in an edittemplate action or (4) file parameter in the config-languages module in an edit action to admin/index.php.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9241?
CVE-2014-9241 has a medium severity rating due to its potential for exploitation via cross-site scripting attacks.
How do I fix CVE-2014-9241?
To fix CVE-2014-9241, upgrade MyBB to version 1.8.2 or later, which includes patches for these vulnerabilities.
Which versions of MyBB are affected by CVE-2014-9241?
CVE-2014-9241 affects MyBB versions 1.8.0 and 1.8.1.
What types of attacks can exploit CVE-2014-9241?
CVE-2014-9241 can be exploited to conduct cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages.
Are there any known exploits for CVE-2014-9241?
Yes, CVE-2014-9241 is known to be exploitable by injecting arbitrary web scripts or HTML through specific parameters in MyBB.