CVE-2018-25248 | Downloads Plugin 2.0.3 on MyBB Parameter Title cross site scripting (Exploit 44400 / EDB-44400)

A vulnerability described as problematic has been identified in Downloads Plugin 2.0.3 on MyBB. This affects an unknown function of the component Parameter Handler. The manipulation of the argument Title results in cross site scripting.

This vulnerability is cataloged as CVE-2018-25248. The attack may be launched remotely. Furthermore, there is an exploit available.