Description In MyBB before 1.8.34, there is XSS in the User CP module via the user email field. Remediation References CVE-2023-28467 Related Vulnerabilities WordPress 4.2.x Prototype Pollution (4.2 - 4.2.31) WordPress Plugin W3 Total Cache Information Disclosure (0.9.2.4) WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60153) Jenkins Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') Vulnerability (CVE-2016-9299) Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6186) Severity Medium Classification CVE-2023-28467 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities