MyBB 1.8.26
Approved changes feed: RSS · Atom
cpe:2.3:a:mybb:mybb:1.8.26:*:*:*:*:*:*:*
part: a version: 1.8.26 update: *
| Vendor | Mybb (8821e130-2590-5689-a7de-85bc65b3bdf4) |
|---|---|
| Product | Mybb (0a7c5598-1dcf-5314-89b1-60f621a820e9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mybb/mybb |
purl2cpe | 2026-06-01 10:11:09.774163 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-53978 |
vulnerable | 2026-06-03 14:53:46.194695 |
myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Announcements
MEDIUM (5.4)
myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum announcement system that allows authenticated administrators to inject malicious scripts when creating announcements. Attackers can exploit this vulnerability by inserting script payloads in the announcement title field when adding announcements through the 'Forums and Posts' > 'Forum Announcements' interface, causing arbitrary JavaScript to execute when the announcement is displayed on the forum.
Published: 2025-12-22T21:35:35.555Z
Updated: 2026-04-07T14:08:18.521Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53977 |
vulnerable | 2026-06-03 14:53:46.194334 |
myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Management
MEDIUM (5.4)
myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum management system that allows authenticated administrators to inject malicious scripts when creating new forums. Attackers can exploit this vulnerability by inserting script payloads in the forum title field when adding new forums through the 'Forums and Posts' > 'Forum Management' interface, causing arbitrary JavaScript to execute when the forum listing is viewed.
Published: 2025-12-22T21:35:35.141Z
Updated: 2026-04-07T14:08:17.679Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53976 |
vulnerable | 2026-06-03 14:53:46.193870 |
myBB Forums 1.8.26 Stored Cross-Site Scripting via Template Management
MEDIUM (5.4)
myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the template management system that allows authenticated administrators to inject malicious scripts when creating new templates. Attackers can exploit this vulnerability by inserting script payloads in the template title field when adding new templates through the 'Templates and Style' > 'Templates' > 'Manage Templates' > 'Global Templates' interface, causing arbitrary JavaScript to execute when the template is viewed.
Published: 2025-12-22T21:35:34.716Z
Updated: 2026-04-07T14:08:16.479Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.