CVE-2018-10580

The CVE-2018-10580 entry corresponds to a Cross‑Site Scripting vulnerability in the MyBB plugin “Latest Posts on Profile” v1.1. The issue arises from not sanitizing the tsubject (thread subject) field when displaying a user’s recent posts on their profile, enabling arbitrary script/HTML injection...