Vulnerabilidades en mybb

36 resultados
Análisis Vexday

MyBB apresenta 8 vulnerabilidades catalogadas, com uma publicada recentemente (últimos 90 dias), mas nenhuma sob exploração ativa conhecida ou classificada como crítica. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de plataformas web, que requer contextualização conforme a versão em uso e exposição da aplicação.

CVE-2026-45121MEDIUMMyBB: Insufficient permission check for calendar selectEPSS 0.3%CVE-2026-45122MEDIUMMyBB: Insufficient permission check for calendar event moveEPSS 0.2%CVE-2026-45124MEDIUMMyBB: Mod CP report resolution missing authorizationEPSS 0.2%CVE-2023-53976MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Template ManagementEPSS 0.2%CVE-2023-53978MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Forum AnnouncementsEPSS 0.2%CVE-2023-53977MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Forum ManagementEPSS 0.2%CVE-2021-47934MEDIUMMyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRFEPSS 0.2%CVE-2018-25247MEDIUMMyBB Like Plugin 3.0.0 Cross-Site Scripting via User ProfilesEPSS 0.2%CVE-2018-25248MEDIUMMyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.phpEPSS 0.2%CVE-2026-45120MEDIUMMyBB: Insufficient authorization for private calendar eventsEPSS 0.2%CVE-2018-25250MEDIUMMyBB Last User's Threads in Profile Plugin 1.2 Persistent XSSEPSS 0.2%CVE-2026-45129MEDIUMMyBB: ACP Recovery Codes CSRFEPSS 0.1%CVE-2026-45126LOWMyBB: ACP Questions state CSRFEPSS 0.1%CVE-2026-45127LOWMyBB: ACP Mass Mail draft resend CSRFEPSS 0.1%CVE-2026-45128LOWMyBB: ACP Users View Manager default CSRFEPSS 0.1%CVE-2026-45119MEDIUMMyBB: ACP UTF-8 Conversion CSRFEPSS 0.1%