Vulnerabilities in Mybb
36 resultsVexday analysis
MyBB apresenta 4 vulnerabilidades catalogadas, todas relacionadas a Cross-Site Scripting (CWE-79), com nenhuma atualmente sob exploração ativa ou classificada como crítica. O panorama de risco é estável, sem novos descobrimentos nos últimos 90 dias, indicando que as exposições conhecidas não constituem ameaça imediata, embora o padrão de fraqueza sugira necessidade contínua de validação de entrada.
CVE-2026-45124MEDIUMMyBB: Mod CP report resolution missing authorizationEPSS 0.3%CVE-2026-45120MEDIUMMyBB: Insufficient authorization for private calendar eventsEPSS 0.3%CVE-2018-25309MEDIUMMyBB Recent threads 17.0 Persistent Cross-Site ScriptingEPSS 0.3%CVE-2018-25249MEDIUMMyBB My Arcade Plugin 1.3 Persistent XSS via CommentEPSS 0.3%CVE-2023-53976MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Template ManagementEPSS 0.2%CVE-2023-53977MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Forum ManagementEPSS 0.2%CVE-2023-53978MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Forum AnnouncementsEPSS 0.2%CVE-2021-47934MEDIUMMyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRFEPSS 0.2%CVE-2018-25247MEDIUMMyBB Like Plugin 3.0.0 Cross-Site Scripting via User ProfilesEPSS 0.2%CVE-2018-25248MEDIUMMyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.phpEPSS 0.2%CVE-2018-25250MEDIUMMyBB Last User's Threads in Profile Plugin 1.2 Persistent XSSEPSS 0.2%CVE-2026-45129MEDIUMMyBB: ACP Recovery Codes CSRFEPSS 0.2%CVE-2026-45126LOWMyBB: ACP Questions state CSRFEPSS 0.2%CVE-2026-45128LOWMyBB: ACP Users View Manager default CSRFEPSS 0.2%CVE-2026-45127LOWMyBB: ACP Mass Mail draft resend CSRFEPSS 0.2%CVE-2026-45119MEDIUMMyBB: ACP UTF-8 Conversion CSRFEPSS 0.2%