CVE-2018-11430

An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. The XSS is located in the mod notes textarea.

• CWE-79

• https://www.exploit-db.com/exploits/44754/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44754/Exploit, Third Party Advisory, VDB Entry

Published

May 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11424There is Memory corruption in the web interface of Moxa OnCe…
• CVE-2018-11425Memory corruption issue was discovered in Moxa OnCell G3470A…
• CVE-2018-11426A weak Cookie parameter is used in the web application of Mo…
• CVE-2018-11427CSRF tokens are not used in the web application of Moxa OnCe…
• CVE-2018-11429ATLANT (ATL) is a smart contract running on Ethereum. The mi…
• CVE-2018-1143A remote unauthenticated user can execute commands as root i…
• CVE-2018-11432The mobi_parse_mobiheader function in read.c in Libmobi 0.3 …
• CVE-2018-11433The mobi_get_kf8boundary_seqnumber function in util.c in Lib…
• CVE-2018-11434The buffer_fill64 function in compression.c in Libmobi 0.3 a…
• CVE-2018-11435The mobi_decompress_huffman_internal function in compression…
• CVE-2018-11436The buffer_addraw function in buffer.c in Libmobi 0.3 allows…
• CVE-2018-11437The mobi_reconstruct_parts function in parse_rawml.c in Libm…