CVE-2021-27279

MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode)

published February 22, 2021

CVSS
—
EPSS
1%
Percentile
61.1
In the wild
Unconfirmed
What it is

MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00959 · 61.1th percentile
Published
2021-02-22T19:04Z
EPSS history
Timeline
  • 22 FEB 19:04Z
    MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode)
    cvelistv5