Description
MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field. Attackers can inject malicious scripts that will execute in the admin interface when viewing delete account reasons.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| vintagedaddyo | MyBB Delete Account Plugin | 1.4 | — |
References
- ExploitDB-49500 exploit
- MyBB Delete Account Plugin Repository product
- VulnCheck Advisory: MyBB Delete Account Plugin 1.4 - Cross-Site Scripting third-party-advisory