In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event.

Published Apr 24, 2017 · Updated Sep 16, 2024 · Assigned by mitre