CVE-2013-7275
N/A
Published: January 8, 2014 at 03:00 PM UTC
Updated: June 17, 2026 at 12:01 AM UTC
1 product affected across 1 vendorMybb
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.6.111.0 beta41.0 pr11.0 pr21.0 rc11.0 rc21.0 rc31.0 rc41.001.011.021.031.041.1.01.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.21.2.01.2.11.2.101.2.111.2.121.2.131.2.141.2.21.2.31.2.41.2.51.2.61.2.71.2.81.2.91.3 pre-1.01.4.01.4.11.4.101.4.111.4.121.4.131.4.141.4.151.4.161.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.91.5.11.5.21.6.01.6.11.6.101.6.21.6.31.6.41.6.51.6.61.6.71.6.81.6.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (5)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://blog.mybb.com/2013/12/16/mybb-1-6-12-released-security-maintenance-releaseThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/55945x_refsource_CONFIRMExploitPatch
Source: [email protected]
https://github.com/mybb/mybb/commit/6212bc954d72caf591e141ca36b8df964387bee8Quick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card