← All advisories

High severity8.8NVD Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2018-14575

CVE-2018-14575

Description

Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CSRF) via a post subject.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

MyBB/Trash Binllm-fuzzy2 versions
1.1.3+ 1 more
- (no CPE)range: 1.1.3
- cpe:2.3:a:mybb:trash_bin:1.1.3:*:*:*:*:mybb:*:*
PhpBB/Mybulletinboardinferred
Range: <=1.1.3

Patches

Vulnerability mechanics

References

3

packetstormsecurity.com/files/151704/MyBB-Trash-Bin-1.1.3-Cross-Site-Request-Forgery-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/46384/nvdExploitThird Party AdvisoryVDB Entry
community.mybb.com/mods.phpnvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.