Read the docs

mybb

Records174All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high47CVSS 7.0–8.9

Exploited now

mybb records in CISA KEV

No mybb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mybb 140 records HIGH Merge System 24 records MEDIUM Active Threads 1 record MEDIUM Ajax Forum Stat 1 record LOW Ban List 1 record LOW Delete Account 1 record MEDIUM Devbb 1 record LOW Last User Threads 1 record MEDIUM

Records

1 record in Last User Threads · all components

TI-2018-15475 CVE-2018-25250 · GHSA-8grq-4hc4-mrpv

MyBB Last User's Threads in Profile Plugin 1.2 Persistent XSS

Priority MEDIUM 62

MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00209 Published 2026-04-04 No fix listed CWE-79
Open these records in search →