Medium · 6.1 CVE-2022-43707 EUVD-2022-46689

MyBB 1.8.31 has a Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor) allows remote attackers to inject HTML vi…

Published Nov 21, 2022 · Updated Apr 29, 2025 · Assigned by mitre

Description

MyBB 1.8.31 has a Cross-site scripting (XSS) vulnerability in the visual MyCode editor (SCEditor) allows remote attackers to inject HTML via user input or stored data

References

https://mybb.com
https://github.com/mybb/mybb/security/advisories/GHSA-6vpw-m83q-27px