TI-2018-07472 CVE-2018-10580 · GHSA-gr93-phx8-7v53The "Latest Posts on Profile" plugin 1.1 for MyBB has XSS because there is an added…Priority LOW 28The "Latest Posts on Profile" plugin 1.1 for MyBB has XSS because there is an added section in a user profile that displays that user's most recent posts without sanitizing the tsubject (aka thread subject) field.CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01579 · Published 2018-05-11 · No fix listed CWE-79