Approved changes feed: RSS · Atom

cpe:2.3:a:mybb:mybb:1.8.20:*:*:*:*:*:*:*

part: a version: 1.8.20 update: *

VendorMybb (8821e130-2590-5689-a7de-85bc65b3bdf4)
ProductMybb (0a7c5598-1dcf-5314-89b1-60f621a820e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mybb/mybb purl2cpe 2026-06-01 10:11:09.774155

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-19049 vulnerable 2026-06-03 14:41:54.680899 Details available
Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Description" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'.
Published: 2021-08-31T13:16:35.000Z
Updated: 2024-08-04T14:08:30.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19048 vulnerable 2026-06-03 14:41:54.680496 Details available
Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'.
Published: 2021-08-31T13:16:34.000Z
Updated: 2024-08-04T14:08:30.702Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.