Unrated severityNVD Advisory· Published Aug 14, 2014· Updated May 6, 2026
CVE-2014-5248
CVE-2014-5248
Description
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to video MyCode.
Affected products
15cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*range: <=1.6.14
- cpe:2.3:a:mybb:mybb:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.10:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.11:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.12:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.13:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.6.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- blog.mybb.com/2014/08/04/mybb-1-6-15-released-security-maintenance-releasenvdPatchVendor Advisory
- secunia.com/advisories/59707nvd
News mentions
0No linked articles in our index yet.