CVE-2021-28115

The CVE-2021-28115 entry concerns the OUGC Feedback plugin for MyBB (prior to version 1.8.23). The vulnerability is an XSS flaw in the comment field during an edit operation, allowing script injection. Affected software is the OUGC Feedback plugin for MyBB; the root cause is input handling in the...

OUGC Feedback 跨站脚本漏洞

Omar Gonzalez OUGC-Feedback is an open source application by Omar Gonzalez. Provides a forum to add a powerful feedback system features . A cross-site scripting vulnerability exists in the OUGC Feedback plugin before 1.8.23 for MyBB, which allows XSS via the comment field of a feedback during an...

MyBB < 1.8.25 XSS Vulnerability

MyBB is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

MyBB Cross-Site Scripting Vulnerability (CNVD-2021-12661)

MyBB is a free open source forum software. A stored cross-site scripting vulnerability exists in MyBB versions prior to 1.8.25. An attacker can exploit this vulnerability by nesting email MyCode tags to conduct cross-site scripting attacks...

CVE-2021-27279

MyBB before 1.8.25 allows stored XSS via nested email tags with MyCode aka BBCode...

CVE-2021-27279

MyBB before 1.8.25 allows stored XSS via nested email tags with MyCode aka BBCode...

Design/Logic Flaw

MyBB before 1.8.25 allows stored XSS via nested email tags with MyCode aka BBCode...

CVE-2021-27279

MyBB before 1.8.25 allows stored XSS via nested email tags with MyCode aka BBCode...

CVE-2021-27279

MyBB before 1.8.25 allows stored XSS via nested email tags with MyCode aka BBCode...

CVE-2021-27279

CVE-2021-27279 affects MyBB prior to 1.8.25. The vulnerability is a stored XSS via nested [email] tags in MyCode (BBCode), enabling script injection when processing user-supplied content. Product: MyBB (forum software); affected version range: before 1.8.25. Root cause: improper sanitization of B...

MyBB 跨站脚本漏洞

MyBB is a free open source forum software. A stored cross-site scripting vulnerability exists in MyBB versions prior to 1.8.25. An attacker can exploit this vulnerability by nesting email MyCode tags to conduct cross-site scripting attacks...

PT-2021-17383 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.25 Description: The issue allows stored XSS via nested email tags with MyCode aka BBCode. Recommendations: For versions prior to 1.8.25, update to version 1.8.25 or later to resolve the issue...

CVE-2021-3350

deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter...

CVE-2021-3350

deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter...

Cross site scripting

deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter...

CVE-2021-3350

deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter...

CVE-2021-3350

CVE-2021-3350 affects the Delete Account plugin 1.4 for MyBB, where deleteaccount.php is vulnerable to XSS via the deletereason parameter. According to the connected records, the issue enables cross-site scripting with network access and no authentication required (per CVSS2), with impact limited...

MyBB Cross-Site Scripting Vulnerability

MyBB MyBulletinBoard is a free and web-based forum software developed by MyBB MYBB team using PHP and MySQL. The software is easy to use, supports multiple languages, scalable and so on. A cross-site scripting vulnerability exists in the Delete Account plugin 1.4 for MyBB, which stems from...

MyBB Trending Widget Plugin 1.2 - Cross-Site Scripting

Exploit Title: MyBB Trending Widget Plugin 1.2 - Cross-Site Scripting Date: 11/28/2018 Author: 0xB9 Software Link: https://github.com/zainali99/trends-widget Version: 1.2 Tested on: Windows 10 1. Description: This plugin shows the most trending threads. Trending thread titles aren't sanitized to...

MyBB Delete Account 1.4 Cross Site Scripting

Exploit Title: MyBB Delete Account Plugin 1.4 - Cross-Site Scripting Date: 1/25/2021 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://github.com/vintagedaddyo/MyBBPlugin-DeleteAccount/ Version: 1.4 Tested on: Windows 10 1. Description: This plugin allows users to delete...