CVE-2022-43707: XSS
First published: Mon Nov 21 2022(Updated: )
MyBB 1.8.31 has a Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor) allows remote attackers to inject HTML via user input or stored data
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mybb Mybb | <1.8.32 | |
| <1.8.32 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this MyBB vulnerability?
The vulnerability ID for this MyBB vulnerability is CVE-2022-43707.
What is the affected software for this vulnerability?
The affected software for this vulnerability is MyBB version up to and excluding 1.8.32.
What is the severity of the CVE-2022-43707 vulnerability?
The severity of the CVE-2022-43707 vulnerability is medium, with a CVSS score of 6.1.
How does this vulnerability occur?
This vulnerability occurs due to a Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor), which allows remote attackers to inject HTML via user input or stored data.
How can I fix the CVE-2022-43707 vulnerability?
To fix the CVE-2022-43707 vulnerability, upgrade MyBB to version 1.8.32 or higher, which addresses the Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor).
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/remedy
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/mybb
- canonical/mybb mybb