CVE-2022-28354

MEDIUM CVSS: 6.1 Published: 2023-04-24 Modified: 2026-06-17

Description

In the Active Threads Plugin 1.3.0 for MyBB, the activethreads.php date parameter is vulnerable to XSS when setting a time period.

Affected Platforms

Mybb Active Threads

Weakness Type

CWE-79, CWE-79

References