medium6.1
CVE-2018-25247
MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability.
Impact
MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject script payloads into post or thread subjects; when other users view a profile that displays the attacker's liked posts, the unsanitized subject is rendered, executing the script in the viewer's browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybb | Thankyou\/Like System | through 3.0.0 |