CVE-2022-43708

Published: 2022-11-22T00:15Z

Last Modified: 2024-11-21T07:27Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

MyBB 1.8.31 has a (issue 2 of 2) cross-site scripting (XSS) vulnerabilities in the post Attachments interface allow attackers to inject HTML by persuading the user to upload a file with specially crafted name > MITRE Terms of Use apply – see LICENSE‑MITRE.txt