Description
MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).
Unscored
CVE-2021-27279
EUVD-2021-14044
MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).
Published Feb 22, 2021 · Updated Aug 3, 2024 · Assigned by mitre