CVE-2022-28353 Information

Description

In the External Redirect Warning Plugin 1.3 for MyBB the redirect URL (aka external.php?url=) is vulnerable to XSS.

Reference

http://packetstormsecurity.com/files/171403/MyBB-External-Redirect-Warning-1.3-Cross-Site-Scripting.html https://community.mybb.com/mods.php?action=view&pid=493 In the External Redirect Warning Plugin 1.3 for MyBB the redirect URL (aka external.php?url=) is vulnerable to XSS.