CVE-2018-14888: Improper Neutralization of Input During Web Page Generation

inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject...