| Package | Affected versions | Patched versions |
|---|---|---|
| mybb | < 1.8.28 | 1.8.28 |
MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free