Description

Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."

Remediation

References

CVE-2011-5132

Related Vulnerabilities

Moment.js Other Vulnerability (CVE-2022-31129)

Oracle JRE CVE-2013-5802 Vulnerability (CVE-2013-5802)

MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50093)

Drupal Core 9.2.x Cross-Site Scripting (9.2.0 - 9.2.8)

Piwigo Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2025-62406)

Severity

Medium

Classification

CVE-2011-5132 CWE-707

Tags

Missing Update Known Vulnerabilities