medium5.4
CVE-2021-41866
MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly.
Impact
MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybb | Mybb | before 1.8.28 |