CVE-2018-25249

MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments. Attackers can add crafted HTML and JavaScript payloads in the comment field that execute when other users view or edit...

MyBB My Arcade Plugin 跨站脚本漏洞

The MyBB My Arcade Plugin is a forum download plugin developed by MyBB Corporation. Version 1.3 of the MyBB My Arcade Plugin contains a cross-site scripting vulnerability. This vulnerability arises from improper cleaning of input data in the arcade game score comment field, which may allow...

PT-2026-30369

Name of the Vulnerable Software and Affected Versions MyBB My Arcade Plugin version 1.3 Description Authenticated users can perform a persistent cross-site scripting attack by injecting malicious HTML and JavaScript payloads into the comment field of arcade game scores. These scripts execute...