Description
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."
Remediation
References
Related Vulnerabilities
WordPress Plugin WP-Forum 'sendmail.php' SQL Injection (1.7.8)
WordPress Plugin File Manager Cross-Site Request Forgery (7.2.4)
Apache HTTP Server Out-of-bounds Read Vulnerability (CVE-2026-43951)
PHP Improper Input Validation Vulnerability (CVE-2016-7417)
Moodle Improper Privilege Management Vulnerability (CVE-2017-7532)