| Package | Affected versions | Patched versions |
|---|---|---|
| mybb | < 1.8.25 | 1.8.25 |
MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free