mybb

Records174All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high47CVSS 7.0–8.9

Exploited now

mybb records in CISA KEV

No mybb vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Active Threads · all components

TI-2022-11113 CVE-2022-28354 · GHSA-6hqf-qj93-6727

MEDIUM 60

In the Active Threads Plugin 1.3.0 for MyBB, the activethreads.php date parameter is vulnerable to XSS when setting a time period.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0054 Published 2023-04-24 No fix listed CWE-79