CVE-2019-3578: XSS
Published Jun 6, 2019
·Updated
MyBB 1.8.19 has XSS in the resetpassword function.
Affected Software
2 affected components
MyBB MyBB=1.18.19
MyBB MyBB=1.8.19
Event History
Jun 6, 2019
CVE Published
via MITRE·06:13 PM
Data Sourced
via MITRE·06:13 PM
Description
Data Sourced
via NVD·07:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this MyBB vulnerability?
The vulnerability ID for this MyBB vulnerability is CVE-2019-3578.
2
What is the severity rating for CVE-2019-3578?
The severity rating for CVE-2019-3578 is medium.
3
What software version is affected by CVE-2019-3578?
The MyBB software version 1.8.19 is affected by CVE-2019-3578.
4
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for CVE-2019-3578 is CWE-79.
5
How do I fix the XSS vulnerability in the resetpassword function of MyBB 1.8.19?
To fix the XSS vulnerability in the resetpassword function of MyBB 1.8.19, update to the latest version of MyBB (1.8.20) which includes a security fix for this vulnerability.