CVE-2015-2149

Multiple cross-site scripting XSS vulnerabilities in the administrative backend in MyBB aka MyBulletinBoard before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the 1 MIME-type field in an add action in the config-attachmenttypes module to admin/index.php; 2...

PT-2015-5629

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.4 Description The issue affects the administrative backend, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved through various fields in different modules, including the...