Vulnerabilities > Mybb > Mybb > 1.8.32

DATE CVE VULNERABILITY TITLE RISK
2023-11-06 CVE-2023-45556 Cross-site Scripting vulnerability in Mybb
Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via the theme Name parameter in the theme management component.
network
low complexity
mybb CWE-79
5.4
2023-11-06 CVE-2023-46251 Cross-site Scripting vulnerability in Mybb
MyBB is a free and open source forum software.
network
low complexity
mybb CWE-79
6.1
2023-08-29 CVE-2023-41362 Code Injection vulnerability in Mybb
MyBB before 1.8.36 allows Code Injection by users with certain high privileges.
network
low complexity
mybb CWE-94
7.2
2023-05-22 CVE-2023-28467 Cross-site Scripting vulnerability in Mybb
In MyBB before 1.8.34, there is XSS in the User CP module via the user email field.
network
low complexity
mybb CWE-79
6.1