CVE-2026-45118

creationtimestamp| type| source ---|---|--- 2026-08-18 18:09:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtessdbrlp2e 2026-08-18 18:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtetey6deh2e...

CVE-2026-45118

MyBB is free and open source forum software. Prior to 1.8.40, the Contact module does not validate a redirect URL or protocol correctly, resulting in an open redirect and reflected JavaScript code injection. contact.php accepts the redirect target from the from HTTP parameter in $mybb-input'from'...