medium5.4
CVE-2021-27279
MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).
Impact
MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybb | Mybb | before 1.8.25 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/mybb/mybb/commit/cb781b49116bf5c4d8deca3e17498122b701677a
- https://github.com/mybb/mybb/security/advisories/GHSA-6483-hcpp-p75w
- https://mybb.com/versions/1.8.25/
- https://github.com/mybb/mybb/commit/cb781b49116bf5c4d8deca3e17498122b701677a
- https://github.com/mybb/mybb/security/advisories/GHSA-6483-hcpp-p75w
- https://mybb.com/versions/1.8.25/