Description Cross-site Scripting (XSS) vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages. Remediation References CVE-2021-27889 Related Vulnerabilities Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2018-20506) WordPress Plugin Synchi Arbitrary File Deletion (5.1) Oracle JRE CVE-2013-5820 Vulnerability (CVE-2013-5820) WebLogic CVE-2020-14841 Vulnerability (CVE-2020-14841) MySQL CVE-2018-3054 Vulnerability (CVE-2018-3054) Severity Medium Classification CVE-2021-27889 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities