2019-03-29 18:58:41
mitre
PUBLISHED
A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the username parameter.