CVE-2019-3501: Ougc Awards Project Ougc Awards

Medium severity, CVSS 4.8. EPSS: 2.4% chance of exploitation in the next 30 days.

The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards page or in a user profile.

Affected products

• Ougc Awards Project Ougc Awards: before 1.8.19 (fixed in 1.8.19)

Published 2019-01-02. Last modified 2026-06-17.