Skip to content
OpenAdvisories

Product · myBB Group

MyBB Like Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2018-25247

    MyBB Like Plugin 3.0.0 Cross-Site Scripting via User Profiles

    MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject script payloads into post or thread subjects; when other users view a profile that displays the attacker's liked posts, the unsanitized subject is …

    myBB Group MyBB Like Plugin