MyBB Security Group (Paul H.)

CVE-2021-47905 WRITEUP MEDIUM WRITEUP

MyBB Delete Account Plugin 1.4 - XSS

MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field. Attackers can inject malicious scripts that will execute in the admin interface when viewing delete account reasons.

CVSS 6.1

View Code