CVE-2018-17128
CVE-2018-17128
Vexday Risk Score
45Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Proof of concept
Public proof of concept exists, but not yet automated.
CVSS —EPSS 74.8%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
17 Sep 2018Published on NVD
24 Sep 2018Public PoC
Weaponization speed
7 daysto first PoC
Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.
Recommendation: Plan a near-term fix — a public PoC already exists.
A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/45449/unverifiedexploitdbwww.exploit-db.com/exploits/45449unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.