Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-47905. PoCs published by 0xB9.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in the MyBB Delete Account Plugin 1.4. The vulnerability occurs when a user inputs a malicious script as the reason for deleting their account, which executes when viewed by an admin.
Description
MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field. Attackers can inject malicious scripts that will execute in the admin interface when viewing delete account reasons.
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in the MyBB Delete Account Plugin 1.4. The vulnerability occurs when a user inputs a malicious script as the reason for deleting their account, which executes when viewed by an admin.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N