CVE-2023-45556: XSS

Q: What is CVE-2023-45556?

CVE-2023-45556 is a Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 that allows a local attacker to execute arbitrary code via the theme Name parameter in the theme management component.

Q: How severe is CVE-2023-45556?

CVE-2023-45556 has a severity level of medium with a CVSS score of 5.4.

Q: How does CVE-2023-45556 impact Mybb Mybb Forums?

CVE-2023-45556 allows a local attacker to execute arbitrary code in Mybb Mybb Forums v.1.8.33 through the theme Name parameter in the theme management component.

Q: What are the affected software versions of CVE-2023-45556?

CVE-2023-45556 affects Mybb Mybb Forums versions 1.8.33 up to but excluding 1.8.37.

Q: Is there a fix for CVE-2023-45556?

Yes, the Mybb Mybb Forums developers have released a fix for CVE-2023-45556. It is recommended to update to version 1.8.37 or above to mitigate the vulnerability.

Published Nov 6, 2023

Updated

Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via the theme Name parameter in the theme management component.

Affected Software

1 affected component

Mybb Mybb<1.8.37

Remediation

Patch Available

https://github.com/mybb/mybb/security/advisories/GHSA-4xqm-3cm2-5xgf

Event History

Nov 6, 2023

CVE Published

12:00 AM

Data Sourced

12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-45556?

CVE-2023-45556 is a Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 that allows a local attacker to execute arbitrary code via the theme Name parameter in the theme management component.

How severe is CVE-2023-45556?