CVE-2021-27279

CVE-2021-27279

EPSS 1.0%

MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/mybb/mybb/commit/cb781b49116bf5c4d8deca3e17498122b701677a https://github.com/mybb/mybb/security/advisories/GHSA-6483-hcpp-p75w https://mybb.com/versions/1.8.25/