CVE-2018-10580

PoC ×2—

CVSS 3.0

5.4 medium

EPSS

2%p75

Published

May 11, 2018 (May 11, 2018)

Modified

Jun 17, 2026

Description

The "Latest Posts on Profile" plugin 1.1 for MyBB has XSS because there is an added section in a user profile that displays that user's most recent posts without sanitizing the tsubject (aka thread subject) field.

Vendors: latest posts on profile project
Products: latest posts on profile
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.