The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable because the wp_ajax_nopriv_mb_template endpoint is publicly accessible without authentication, nonce verification is not enforced for the content_reply mode, and admin-ajax.php responds with Content-Type: text/html, causing browsers to execute injected tags embedded in the JSON response body.
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The sanitization bypass is further compounded by the ability to omit the data_type parameter in a modify request, which skips the HTMLPurifier branch entirely and leaves only mbw_htmlspecialchars2 encoding — fully reversed at render — as the sole barrier.
The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in version 2.4.4 via the mbw_file_upload function. This is due to missing file extension validation on the attacker-supplied image_path parameter, whose basename-derived file name bypasses the extension allowlist applied only to the separate file_name parameter. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. Exploitation requires the board to be configured to allow guest posts, which is the plugin's default mode; the required nonce is printed on every public board page, making it readable by any unauthenticated visitor without a WordPress login.
The Mang Board WordPress plugin (versions up to and including 2.4.0) contains a stored cross-site scripting (XSS) vulnerability via the 'data_type' parameter. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users access the affected pages. It is caused by insufficient input sanitization and output escaping.
The Mang Board WordPress plugin up to version 2.4.3 is vulnerable to a Local File Inclusion (LFI) vulnerability via the '<mode>_type' parameter. This allows unauthenticated attackers to include and execute arbitrary PHP files on the server, potentially leading to code execution and access control bypass. Exploitation requires no authentication and can be performed via a POST request to any page rendering the [mb_board] shortcode, which lacks nonce or capability checks. The vulnerability is classified as CWE-98 and carries a high CVSS score of 8.1.
The Mang Board WordPress plugin is affected by a stored Cross-Site Scripting (XSS) vulnerability in the 'user_name' parameter in all versions up to and including 2.4.3. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users view the affected pages. The existing sanitizer mbw_htmlspecialchars2() does not prevent this attack due to the nature of the exploit payload.
The Mang Board WordPress plugin up to version 2.4.3 is vulnerable to stored Cross-Site Scripting (XSS) via the 'content' parameter. Authenticated users with custom-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.
The Mang Board plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'data_type' parameter affecting all versions up to and including 2.4.2. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts. Exploitation is possible on boards using default settings that allow guest posting and a specific editor type. The vulnerability has a high severity rating with a CVSS score of 7.2.
Mang Board WP, a WordPress plugin, contains a vulnerability in all versions up to and including 2.3.7 that allows authenticated users with subscriber-level access or higher to forge administrator authentication cookies. This is caused by improper privilege management due to flawed HMAC generation and insufficient validation of authentication cookies. Exploiting this flaw can lead to complete site takeover by changing administrator passwords.
The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mp' parameter in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.