CVE-2021-27949

Cross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools...

CVE-2021-27949

CVE-2021-27949: MyBB prior to 1.8.26 is vulnerable to Cross-site Scripting via the Custom moderator tools. The issue affects the MyBB web forum software (PHP/MySQL) and is triggered through inputs handled by moderator tools, enabling injected scripts to run in a victim’s browser. The recommended ...