CVE-2023-45556

Description

Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via the theme Name parameter in the theme management component.

Reserved 2023-10-09 | Published 2023-11-06 | Updated 2024-09-05 | Assigner mitre

References

github.com/...blob/main/MyBB 1.8.33 Cross Site Scripting.txt

raw.githubusercontent.com/...creenshot 2023-10-08 012112.png

github.com/mybb/mybb/security/advisories/GHSA-4xqm-3cm2-5xgf

cve.org (CVE-2023-45556)

nvd.nist.gov (CVE-2023-45556)

Download JSON