CVE-2022-28353

CVSS V2 None CVSS V3 None
Description
In the External Redirect Warning Plugin 1.3 for MyBB, the redirect URL (aka external.php?url=) is vulnerable to XSS.
Overview
  • CVE ID
  • CVE-2022-28353
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-04-16T03:15:07
  • Last Modified Date
  • 2023-04-24T19:12:54
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:external_redirect_warning_project:external_redirect_warning:1.3:*:*:*:*:mybb:*:* 1 OR
References
Reference URL Reference Tags
http://packetstormsecurity.com/files/171403/MyBB-External-Redirect-Warning-1.3-Cross-Site-Scripting.html
https://community.mybb.com/mods.php?action=view&pid=493
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-28353
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28353
History
Created Old Value New Value Data Type Notes
2023-04-17 04:48:32 Added to TrackCVE
2023-04-17 14:01:44 2023-04-17T13:12:43 CVE Modified Date updated
2023-04-17 14:01:44 Received Awaiting Analysis Vulnerability Status updated
2023-04-20 16:00:55 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-04-24 20:01:06 2023-04-24T19:12:54 CVE Modified Date updated
2023-04-24 20:01:06 Undergoing Analysis Analyzed Vulnerability Status updated
2023-04-24 20:01:07 Weakness Enumeration new
2023-04-24 20:01:10 CPE Information updated