CVE-2021-47905

Description

MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field. Attackers can inject malicious scripts that will execute in the admin interface when viewing delete account reasons.

Affected Platforms

Weakness Type

CWE-79

References

• https://github.com/vintagedaddyo/MyBB_Plugin-Delete_Account/
• https://www.exploit-db.com/exploits/49500
• https://www.vulncheck.com/advisories/mybb-delete-account-plugin-cross-site-scrip…
• https://www.exploit-db.com/exploits/49500