2 matches found
CVE-2018-6844
MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen.
CVE-2018-7305
MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts.