← All advisories

Medium severity6.1NVD Advisory· Published Mar 11, 2019· Updated Jun 17, 2026

CVE-2019-9650

CVE-2019-9650

Description

An XSS issue was discovered in upcoming_events.php in the Upcoming Events plugin before 1.33 for MyBB via a crafted name for an event.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Aimeos/Upcoming Eventsinferred
Range: <1.33
Package: https://packagist.org/packages/mybb/upcoming-events
Upcoming Events Project/Upcoming Events
cpe:2.3:a:upcoming_events_project:upcoming_events:*:*:*:*:*:mybb:*:*
Range: <1.33
MyBB/Upcoming Eventsllm-create
Range: <1.33

Patches

Vulnerability mechanics

References

4

github.com/vintagedaddyo/MyBB_Plugin-Upcoming_Events/pull/1/commits/d0a0e1c6e56f248613e0150344ebea8764bba5fanvdPatchThird Party Advisory
packetstormsecurity.com/files/152152/MyBB-Upcoming-Events-1.32-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/46558/nvdExploitThird Party AdvisoryVDB Entry
community.mybb.com/mods.phpnvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.