Vulnerabilidades em mybb
18 resultadosAnálise Vexday
MyBB apresenta 8 vulnerabilidades catalogadas, com uma publicada recentemente (últimos 90 dias), mas nenhuma sob exploração ativa conhecida ou classificada como crítica. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de plataformas web, que requer contextualização conforme a versão em uso e exposição da aplicação.
CVE-2022-24734HIGHRemote code execution in mybbEPSS 77.7%CVE-2022-39265HIGHMail settings' command parameter injection in mybbEPSS 2.2%CVE-2020-15139HIGHXSS in MyBBEPSS 1.3%CVE-2023-53979HIGHMyBB 1.8.32 Authenticated Remote Code Execution via Chained VulnerabilitiesEPSS 0.7%CVE-2024-23335MEDIUMBackups directory .htaccess deletion in. MyBBEPSS 0.6%CVE-2025-48940HIGHMyBB's upgrade component vulnerable to local file inclusionEPSS 0.5%CVE-2023-46251HIGHVisual editor persistent Cross-site Scripting (XSS) in MyBBEPSS 0.5%CVE-2024-23336MEDIUMIncomplete disallowed remote addresses list in MyBBEPSS 0.5%CVE-2025-48941MEDIUMMyBB may disclosure unviewable threads' titles in searchesEPSS 0.3%CVE-2018-25309MEDIUMMyBB Recent threads 17.0 Persistent Cross-Site ScriptingEPSS 0.3%CVE-2018-25249MEDIUMMyBB My Arcade Plugin 1.3 Persistent XSS via CommentEPSS 0.3%CVE-2021-47934MEDIUMMyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRFEPSS 0.2%CVE-2018-25248MEDIUMMyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.phpEPSS 0.2%CVE-2018-25247MEDIUMMyBB Like Plugin 3.0.0 Cross-Site Scripting via User ProfilesEPSS 0.2%CVE-2023-53976MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Template ManagementEPSS 0.2%CVE-2023-53978MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Forum AnnouncementsEPSS 0.2%CVE-2023-53977MEDIUMmyBB Forums 1.8.26 Stored Cross-Site Scripting via Forum ManagementEPSS 0.2%CVE-2018-25250MEDIUMMyBB Last User's Threads in Profile Plugin 1.2 Persistent XSSEPSS 0.2%