CVE-2018-14575: CSRF
First published: Sun Mar 17 2019(Updated: )
Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CSRF) via a post subject.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mybb Trash Bin | =1.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the Trash Bin plugin in MyBB?
The vulnerability ID for the Trash Bin plugin in MyBB is CVE-2018-14575.
What is the severity of CVE-2018-14575?
The severity of CVE-2018-14575 is high with a CVSS score of 8.8.
What is the affected software?
The affected software is MyBB Trash Bin plugin 1.1.3.
How does the vulnerability in Trash Bin plugin manifest?
The vulnerability in Trash Bin plugin manifests as cross-site scripting (XSS) through a thread subject and cross-site request forgery (CSRF) through a post subject.
Where can I find more information about CVE-2018-14575?
You can find more information about CVE-2018-14575 at the following references: [reference link1], [reference link2], [reference link3].
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/weakness
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/mybb
- canonical/mybb trash bin
- version/mybb trash bin/1.1.3