MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-27279 - Vulnerability Database

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-27279

Medium

Reference: CVE-2021-27279

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-27279

Title: MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

MyBB before 1.8.25 allows stored XSS via nested email tags with MyCode (aka BBCode).