CVE-2021-27949: XSS
First published: Mon Mar 15 2021(Updated: )
Cross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mybb Mybb | <1.8.26 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-27949?
CVE-2021-27949 is a Cross-site Scripting vulnerability in MyBB before version 1.8.26 via Custom moderator tools.
How does the Cross-site Scripting vulnerability in MyBB before version 1.8.26 via Custom moderator tools work?
The Cross-site Scripting vulnerability in MyBB allows an attacker to inject malicious scripts into web pages viewed by other users, potentially leading to unauthorized access or manipulation of user data.
What software is affected by CVE-2021-27949?
The vulnerability affects MyBB versions before 1.8.26.
What is the severity of CVE-2021-27949?
The severity of CVE-2021-27949 is medium, with a CVSS score of 6.1.
How can I fix the Cross-site Scripting vulnerability in MyBB (CVE-2021-27949)?
To fix the vulnerability, it is recommended to update MyBB to version 1.8.26 or later, which includes a patch to mitigate the Cross-site Scripting vulnerability.
- collector/nvd-index
- agent/event
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/mybb
- canonical/mybb mybb