CVE-2021-47905

MEDIO 6.1CVE-2021-47905 · Published 23/01/2026 · updated 17/06/2026

In breve

CVE-2021-47905 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda delete account (mybb).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.25%, superiore al 16.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
delete account mybb	`= 1.4`	No fix yet

Description

MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field. Attackers can inject malicious scripts that will execute in the admin interface when viewing delete account reasons.

References

vintagedaddyo/MyBB_Plugin-Delete_Account · Product
exploit-db.com/exploits/49500 · Exploit
vulncheck.com/advisories/mybb-delete-account-plugin-cross-site-scripting · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free