XSS in Mybb

CVE-2008-3069

Multiple cross-site scripting (XSS) vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) portal.php and (2) inc/functions_post.php.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.010 (60.0th percentile) — read the EPSS interpretation.

Affected products

  • Mybb
  • N/a — versions n/a

Weakness classification (CWE)

References