3 matches found
Cross site scripting
deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter...
4.3CVSS6AI score0.00765EPSS
SaveExploits0References1Affected Software1
CVE-2021-3350
CVE-2021-3350 affects the Delete Account plugin 1.4 for MyBB, where deleteaccount.php is vulnerable to XSS via the deletereason parameter. According to the connected records, the issue enables cross-site scripting with network access and no authentication required (per CVSS2), with impact limited...
6.1CVSS5.9AI score0.00765EPSS
SaveExploits0References1Affected Software1
CVE-2021-3350: Improper Neutralization of Input During Web Page Generation
deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter...
6.1CVSS5.8AI score0.00765EPSS
SaveExploits0References2
20