An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. The XSS is located in the mod notes textarea.
References
Link | Resource |
---|---|
https://www.exploit-db.com/exploits/44754/ | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Information
Published : 2018-05-28 09:29
Updated : 2018-06-28 06:22
NVD link : CVE-2018-11430
Mitre link : CVE-2018-11430
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
moderator_log_notes_project
- moderator_log_notes