Description
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via (1) a certain referrer field in usercp2.php, (2) a certain location field in inc/functions_online.php, and certain (3) tsubject and (4) psubject fields in moderation.php.
Remediation
References
Related Vulnerabilities
Jetty Insufficient Session Expiration Vulnerability (CVE-2021-34428)
Apache HTTP Server Other Vulnerability (CVE-2002-0257)
WordPress Plugin GS Insever Portfolio Cross-Site Scripting (1.4.4)
WordPress Plugin Travelpayouts:All Travel Brands in One Place Cross-Site Scripting (0.7.12)
MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-36129)