EIP-2026-112303

PRE-CVE

Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112303. PoCs published by s3m00t.

AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in the Social Sites MyBB Plugin 0.2.2 due to lack of input validation. The PoC shows how malicious JavaScript can be injected into user profile fields and executed when viewed.

Description

Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting

Exploits (1)

exploitdb WORKING POC VERIFIED
by s3m00t · textwebappsphp
https://www.exploit-db.com/exploits/23382

This exploit demonstrates a stored XSS vulnerability in the Social Sites MyBB Plugin 0.2.2 due to lack of input validation. The PoC shows how malicious JavaScript can be injected into user profile fields and executed when viewed.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Social Sites MyBB Plugin 0.2.2
Auth required
Prerequisites: Access to a user account on the MyBB forum · Social Sites plugin installed and activated
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026