Vulnerability Details CVE-2019-3501
The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards page or in a user profile.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.7%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
References
Products affected by CVE-2019-3501
-
cpe:2.3:a:ougc_awards_project:ougc_awards:1.1
-
cpe:2.3:a:ougc_awards_project:ougc_awards:1.8.0
-
cpe:2.3:a:ougc_awards_project:ougc_awards:1.8.3