Filtered by vendor Mybb Subscriptions
Filtered by product Mybb Subscriptions
Total 142 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2014-3827 1 Mybb 1 Mybb 2024-11-21 5.4 Medium
Multiple cross-site scripting (XSS) vulnerabilities in the MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the title parameter in the (1) edit or (2) add action in the user-users module or the (3) finduser action or the name parameter in an (4) edit action in the user-user module or the (5) editprofile action to modcp.php.
CVE-2014-3826 1 Mybb 1 Mybb 2024-11-21 5.4 Medium
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in the edit action of the config-profile_fields module.