CVE-2021-27279

CVE-2021-27279

EPSS 1.0%

MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/mybb/mybb/commit/cb781b49116bf5c4d8deca3e17498122b701677a https://github.com/mybb/mybb/security/advisories/GHSA-6483-hcpp-p75w https://mybb.com/versions/1.8.25/