mybb_downloads vulnerabilities

CVEs whose affected-version data names the mybb_downloads package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2018-25248High· 7.2

5mo ago

MyBB Downloads Plugin 2.0.3 contains a persistent cross-site scripting vulnerability that allows regular members to inject malicious scripts through the download title field

MyBB Downloads Plugin 2.0.3 contains a persistent cross-site scripting vulnerability that allows regular members to inject malicious scripts through the download title field. Attackers can submit a new download with HTML/JavaScript code …

▾ Twilightmybb · mybb_downloadsEPSS 0.22%via NVD