CVE-2023-28467 PoC — MyBB 跨站脚本漏洞

Source

Associated Vulnerability

Readme

# MyBB 1.8.33 User CP email persistent XSS

```
- MyBB 1.8.33 User CP email persistent XSS
- Mybb version < 1.8.34 
- Discoverer: Ahmet Altuntaş
- https://github.com/mybb/mybb/security/advisories/GHSA-3q8x-9fh2-v646
```

## Description

Cross-site scripting (XSS) vulnerability in the User CP module allows remote authenticated users to inject HTML via the user email field, triggered on the User CP Home page.

After registration, the e-mail address is changed and the XSS payload is placed. Then, when "User CP" is entered, the vulnerability is triggered.

```
Payload:
"><svg/onload=confirm('CVE')>"@cve.com
```
![img](https://github.com/ahmetaltuntas/CVE-2023-28467/blob/main/1.png?raw=true)


![img](https://github.com/ahmetaltuntas/CVE-2023-28467/blob/main/2.png?raw=true)

## Solution
Upgrade MyBB version 1.8.34 or higher

File Snapshot

 [4.0K]  /data/pocs/393dc71ed2cdeaf6cc2c767b707209142d43b8c1
├── [436K]  1.png
├── [507K]  2.png
└── [ 832]  README.md

0 directories, 3 files

Remarks