CVE-2018-15596
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.3%
from disclosure to weapon15 days
Published on NVDAug 28
1st PoC+15d
exploitation probability
2.3%top 19% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
An issue was discovered in inc/class_feedgeneration.php in MyBB 1.8.17. On the forum RSS Syndication page, one can generate a URL such as http://localhost/syndication.php?fid=&type=atom1.0&limit=15. The thread titles (within title elements of the generated XML documents) aren't sanitized, leading to XSS.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/45393/unverifiedexploitdbwww.exploit-db.com/exploits/45393unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.