Cross site scripting

deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter...

CVE-2021-3350

CVE-2021-3350 affects the Delete Account plugin 1.4 for MyBB, where deleteaccount.php is vulnerable to XSS via the deletereason parameter. According to the connected records, the issue enables cross-site scripting with network access and no authentication required (per CVSS2), with impact limited...