First published: Mon Apr 24 2017(Updated: )
In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
MyBB | <=1.8.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-8103 has a medium severity rating due to its potential for XSS exploitation.
You can fix CVE-2017-8103 by upgrading MyBB to version 1.8.11 or later.
CVE-2017-8103 affects MyBB versions prior to 1.8.11.
CVE-2017-8103 is an XSS vulnerability related to the Email MyCode component.
Yes, CVE-2017-8103 can be exploited by users through malicious input in the Email MyCode functionality.