| Package | Affected versions | Patched versions |
|---|---|---|
| merge system | ≤ 1.8.7 | |
| mybb | ≤ 1.8.7 |
MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwrite arbitrary CSS files via vectors related to "style import."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free