{"api_version":"1","generated_at":"2026-07-23T08:05:18+00:00","cve":"CVE-2018-6506","urls":{"html":"https://cve.report/CVE-2018-6506","api":"https://cve.report/api/cve/CVE-2018-6506.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-6506","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-6506"},"summary":{"title":"CVE-2018-6506","description":"Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2018-02-12 04:29:00","updated_at":"2018-03-06 14:10:00"},"problem_types":["CWE-79"],"metrics":[],"references":[{"url":"https://offensivehacking.wordpress.com/2018/02/07/minibb-forums-v3-2-2-stored-xss/","name":"https://offensivehacking.wordpress.com/2018/02/07/minibb-forums-v3-2-2-stored-xss/","refsource":"MISC","tags":["Exploit","Third Party Advisory"],"title":"MiniBB Forums v3.2.2 – Stored XSS | Penetration Testing","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-6506","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6506","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2018","cve_id":"6506","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"minibb","cpe5":"minibb","cpe6":"3.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"6506","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"minibb","cpe5":"minibb","cpe6":"3.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2018-6506","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://offensivehacking.wordpress.com/2018/02/07/minibb-forums-v3-2-2-stored-xss/","refsource":"MISC","url":"https://offensivehacking.wordpress.com/2018/02/07/minibb-forums-v3-2-2-stored-xss/"}]}},"nvd":{"publishedDate":"2018-02-12 04:29:00","lastModifiedDate":"2018-03-06 14:10:00","problem_types":["CWE-79"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.7,"impactScore":2.7},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"severity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:minibb:minibb:3.2.2:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2018","CveId":"6506","Ordinal":"122633","Title":"CVE-2018-6506","CVE":"CVE-2018-6506","Year":"2018"},"notes":[{"CveYear":"2018","CveId":"6506","Ordinal":"1","NoteData":"Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field.","Type":"Description","Title":null},{"CveYear":"2018","CveId":"6506","Ordinal":"2","NoteData":"2018-02-11","Type":"Other","Title":"Published"},{"CveYear":"2018","CveId":"6506","Ordinal":"3","NoteData":"2018-02-11","Type":"Other","Title":"Modified"}]}}}