Cross site scripting

deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter...

CVE-2021-3350

CVE-2021-3350 affects the Delete Account plugin 1.4 for MyBB, where deleteaccount.php is vulnerable to XSS via the deletereason parameter. According to the connected records, the issue enables cross-site scripting with network access and no authentication required (per CVSS2), with impact limited...

CVE-2021-3350: Improper Neutralization of Input During Web Page Generation

deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter...

PT-2021-20160

Name of the Vulnerable Software and Affected Versions MyBB Delete Account plugin version 1.4 Description The issue allows for XSS via the deletereason parameter in the deleteaccount.php file. Recommendations For MyBB Delete Account plugin version 1.4, avoid using the deletereason parameter in the...