EUVD-2018-21830

MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines. Attackers can create threads with script tags in the subject parameter to execute arbitrary JavaScript in the browser...

EUVD-2018-21752

MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users...

PT-2026-30370

MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users...

EUVD-2018-2652

Malware in sbrugna...

CVE-2022-35221

Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with general user privilege posting a thread subject with large content can cause the server to allocate too much memory, leading to missing...

CVE-2022-35221: Allocation of Resources Without Limits or Throttling

Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with general user privilege posting a thread subject with large content can cause the server to allocate too much memory, leading to missing...

PT-2022-22639

Name of the Vulnerable Software and Affected Versions Teamplus Pro affected versions not specified Description The issue is related to an 'allocation of resource without limits or throttling' vulnerability in the thread subject field of the community discussion feature. A remote attacker with...

CVE-2022-35221

Teamplus Pro community discussion has an ‘allocation of resource without limits or throttling’ vulnerability on thread subject field. A remote attacker with general user privilege posting a thread subject with large content can cause the server to allocate too much memory, leading to missing...

CVE-2018-14575

Trash Bin plugin 1.1.3 for MyBB has cross-site scripting XSS via a thread subject and a cross-site request forgery CSRF via a post subject...

CVE-2018-14575

Trash Bin plugin 1.1.3 for MyBB has cross-site scripting XSS via a thread subject and a cross-site request forgery CSRF via a post subject...

PT-2019-9038

Name of the Vulnerable Software and Affected Versions Trash Bin plugin version 1.1.3 for MyBB Description The issue concerns cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. The XSS vulnerability can be triggered via a thread subject, while the CSRF vulnerability can ...

CVE-2018-14575: Improper Neutralization of Input During Web Page Generation

Trash Bin plugin 1.1.3 for MyBB has cross-site scripting XSS via a thread subject and a cross-site request forgery CSRF via a post subject...

CVE-2018-14888

inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject...

CVE-2018-14888: Improper Neutralization of Input During Web Page Generation

inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject...

PT-2018-12778

Name of the Vulnerable Software and Affected Versions Eldenroot Thank You/Like plugin versions prior to 3.1.0 Description The issue allows for XSS attacks via a post or thread subject, potentially affecting the security of the MyBB platform. Recommendations For versions prior to 3.1.0, update to...

Cross site scripting

The Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject...

CVE-2018-11715

The Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject...

CVE-2018-11715: Improper Neutralization of Input During Web Page Generation

The Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject...

PT-2018-10773

Name of the Vulnerable Software and Affected Versions MyBB Recent Threads plugin versions prior to 1.1 Description The issue allows for XSS via a thread subject, which can lead to malicious script execution. Recommendations For MyBB Recent Threads plugin versions prior to 1.1, update to version 1...

CVE-2018-10580

The "Latest Posts on Profile" plugin 1.1 for MyBB has XSS because there is an added section in a user profile that displays that user's most recent posts without sanitizing the tsubject aka thread subject field...