Description
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Remediation
References
Related Vulnerabilities
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.19)
MediaWiki Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-58517)
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2026-58184)
WordPress Plugin Limit Attempts by BestWebSoft Multiple Vulnerabilities (1.0.3)
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Multiple Vulnerabilities (1.1.9)