| Package | Affected versions | Patched versions |
|---|---|---|
| thankyou/like system | ≤ 3.0.0 |
MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject script payloads into post or thread subjects; when other users view a profile that displays the attacker's liked posts, the unsanitized subject is rendered, executing the script in the viewer's browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free