CVE-2018-11532: Changuondyu Advanced Statistics Project Changuondyu Advanced Statistics

Medium severity, CVSS 6.1. EPSS: 2.4% chance of exploitation in the next 30 days.

An issue was discovered in the ChangUonDyU Advanced Statistics plugin 1.0.2 for MyBB. changstats.php has XSS, as demonstrated by a subject field.

Affected products

• Changuondyu Advanced Statistics Project Changuondyu Advanced Statistics: version 1.0.2 only

Published 2018-05-29. Last modified 2026-06-17.