CVE-2022-28354: XSS
First published: Mon Apr 24 2023(Updated: )
In the Active Threads Plugin 1.3.0 for MyBB, the activethreads.php date parameter is vulnerable to XSS when setting a time period.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mybb Active Threads | =1.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this MyBB Active Threads Plugin vulnerability?
The vulnerability ID for this MyBB Active Threads Plugin vulnerability is CVE-2022-28354.
What is the title of this vulnerability?
The title of this vulnerability is 'In the Active Threads Plugin 1.3.0 for MyBB the activethreads.php date parameter is vulnerable to XSS'.
What is the affected software for this vulnerability?
The affected software for this vulnerability is MyBB Active Threads Plugin version 1.3.0.
What is the severity of CVE-2022-28354?
The severity of CVE-2022-28354 is medium with a severity value of 6.1.
How can I fix the MyBB Active Threads Plugin vulnerability?
To fix the MyBB Active Threads Plugin vulnerability, update to a version that is not affected by the vulnerability.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/mybb
- canonical/mybb active threads
- version/mybb active threads/1.3.0