EIP-2026-109715
PRE-CVEMyBB Forums 1.8.2 - Persistent Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-109715. PoCs published by Avinash Thapa.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in MyBB 1.8.2 by injecting malicious JavaScript into the 'Custom User Title' field, which executes when viewed in the calendar event page. The PoC includes detailed HTTP request/response examples and step-by-step reproduction instructions.
Description
MyBB Forums 1.8.2 - Persistent Cross-Site Scripting
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in MyBB 1.8.2 by injecting malicious JavaScript into the 'Custom User Title' field, which executes when viewed in the calendar event page. The PoC includes detailed HTTP request/response examples and step-by-step reproduction instructions.