Description
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."
References
- mybb-username-xss(71461) vdb-entry
- 46951 third-party-advisory
- http://blog.mybb.com/2011/11/25/mybb-1-6-5-released-feature-update-security-maintenance-release/
- 50816 vdb-entry
- 77326 vdb-entry