Medium severity4.8NVD Advisory· Published Feb 12, 2018· Updated Jun 17, 2026

CVE-2018-6506

Description

Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Minibb/Minibbinferred2 versions
= 3.2.2+ 1 more
- (no CPE)range: = 3.2.2
- (no CPE)range: =3.2.2

Patches

Vulnerability mechanics

References

offensivehacking.wordpress.com/2018/02/07/minibb-forums-v3-2-2-stored-xss/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000