CVE-2021-41866

MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly

published October 26, 2021

CVSS
—
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00493 · 41.4th percentile
Published
2021-10-26T21:25Z
EPSS history
Timeline
  • 26 OCT 21:25Z
    MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly
    cvelistv5