UpHeron
All vulnerabilities

Servers and applications

CVE-2020-19048

Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'.

Severity
Medium 5.4
Published
31 Aug 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
MyBBServers and applications · cpe:a:mybb:mybb
  • Version 1.8.20

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-19048
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-19048