CVE-2023-53979

HIGH 8.8CVE-2023-53979 · Published 22/12/2025 · updated 17/06/2026

In short

CVE-2023-53979 is a HIGH (CVSS 8.8) vulnerability affecting mybb (mybb).
Chance of exploitation in the next 30 days (EPSS): 0.82%, higher than 57.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mybb mybb	`= 1.8.32`	No fix yet

Description

MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute commands through the language configuration editing interface.

References

fdlucifer.github.io/2023/01/17/mybb1-8-32-LFI-RCE · Exploit
mybb.com · Product
exploit-db.com/exploits/51213 · Exploit
vulncheck.com/advisories/mybb-authenticated-remote-code-execution-via-chained-vulnerabilities · Exploit
cve.org/CVERecord

More vulnerabilities in mybb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mybb

= 1.8.32

No fix yet

Description

More vulnerabilities in mybb

See all →