| Package | Affected versions | Patched versions |
|---|---|---|
| mybb | < 1.8.20 | 1.8.20 |
A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free