CVE-2015-2149

MyBB prior to version 1.8.4 contains multiple XSS vulnerabilities in the administrative backend (admin/index.php) that allow remote authenticated users to inject arbitrary script/HTML via various fields across modules (config-attachment_types, config-mycode, user-groups, forum-management, tool-ta...