CNNVD-202601-3963 Information

CNNVD ID

CNNVD-202601-3963

CVE-2021-47905

  • CNNVD Published: 2026-01-23

Description (Chinese)

MyBB_Plugin-Delete_Account是vintagedaddyo个人开发者的一个MyBB插件。 MyBB_Plugin-Delete_Account 1.4版本存在安全漏洞,该漏洞源于账户删除原因输入字段存在跨站脚本漏洞,可能导致恶意脚本执行。

Description (English)

MyBB Plugin-Delete Account is a MyBB plugin for personal developers of vintagedaddyo. MyBB Plugin-Delete Account version 1.4 contains a security loophole that stems from the cross-site script gap in the entry field for the account ’ s deletion and may lead to malicious script execution.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2026-01-23

Last Modified

2026-02-24

References

https://github.com/vintagedaddyo/MyBB_Plugin-Delete_Account/ https://www.exploit-db.com/exploits/49500 https://www.vulncheck.com/advisories/mybb-delete-account-plugin-cross-site-scripting

Patch

https://mybb.com/download/

Share on: