Priority MEDIUM 41
MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00818 · Published 2025-12-22 · No fix listed CWE-22
Priority LOW 23
myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum announcement system that allows authenticated administrators to inject malicious scripts when creating announcements.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00236 · Published 2025-12-22 · No fix listed CWE-79
Priority LOW 23
myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum management system that allows authenticated administrators to inject malicious scripts when creating new forums.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00236 · Published 2025-12-22 · No fix listed CWE-79
Priority LOW 23
myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the template management system that allows authenticated administrators to inject malicious scripts when creating new templates.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00244 · Published 2025-12-22 · No fix listed CWE-79
Priority HIGH 82
myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code.
CVSS 4.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.03024 · Published 2025-08-13 · No fix listed CWE-912
Priority LOW 30
MyBB is free and open source forum software.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00352 · Published 2025-06-02 · Fixed in 1.8.39 CWE-1230
Priority LOW 32
MyBB is free and open source forum software.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00564 · Published 2025-06-02 · Fixed in 1.8.39 CWE-22
Priority HIGH 66
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Add Mycode function.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2025-04-17 · No fix listed CWE-918
Priority HIGH 66
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00442 · Published 2025-04-17 · No fix listed CWE-918
Priority HIGH 66
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00442 · Published 2025-04-17 · No fix listed CWE-918
Priority HIGH 66
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00442 · Published 2025-04-17 · No fix listed CWE-918
Priority MEDIUM 60
A stored cross-site scripting (XSS) vulnerability in the component install\index.php of MyBB v1.8.38 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Name paramete…
CVSS 3.1MEDIUM 6.1· Network · Low privileges · User interaction · EPSS 0.00273 · Published 2024-11-20 · No fix listed CWE-79
Priority LOW 22
MyBB is a free and open source forum software.
CVSS 3.1MEDIUM 4.7· Network · High privileges · No interaction · EPSS 0.00559 · Published 2024-05-01 · Fixed in 1.8.38 CWE-20
Priority LOW 23
MyBB is a free and open source forum software.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00457 · Published 2024-05-01 · Fixed in 1.8.38 CWE-184
Priority LOW 36
MyBB is a free and open source forum software.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00556 · Published 2023-11-06 · Fixed in 1.8.37 CWE-79
Priority LOW 25
Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via the theme Name parameter in the theme management component.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00576 · Published 2023-11-06 · No fix listed CWE-79
Priority MEDIUM 50
Installer RCE on settings file write in MyBB before 1.8.22.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00726 · Published 2023-09-01 · No fix listed CWE-94
Priority HIGH 67
MyBB before 1.8.36 allows Code Injection by users with certain high privileges.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02051 · Published 2023-08-29 · No fix listed CWE-94
Priority LOW 28
In MyBB before 1.8.34, there is XSS in the User CP module via the user email field.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0051 · Published 2023-05-22 · No fix listed CWE-79
Priority LOW 37
MyBB before 1.8.33 allows Directory Traversal.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01617 · Published 2023-01-03 · No fix listed CWE-22
Priority LOW 24
MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00718 · Published 2022-11-21 · No fix listed CWE-79
Priority LOW 27
MyBB 1.8.31 has a (issue 2 of 2) cross-site scripting (XSS) vulnerabilities in the post Attachments interface allow attackers to inject HTML by persuading the user to upload a file with specially crafted name
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00407 · Published 2022-11-21 · No fix listed CWE-79
Priority LOW 28
MyBB 1.8.31 has a Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor) allows remote attackers to inject HTML via user input or stored data
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00523 · Published 2022-11-21 · No fix listed CWE-79
Priority HIGH 67
MyBB is a free and open source forum software.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03107 · Published 2022-10-06 · Fixed in 1.8.31 CWE-74
Priority HIGH 73
MyBB is a free and open source forum software.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.77827 · Published 2022-03-09 · Fixed in 1.8.30 CWE-94
Load more
THREATIST.IORead the docs