VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Feb 11, 2020· Updated Jun 17, 2026

CVE-2014-3827

CVE-2014-3827

Description

Multiple cross-site scripting (XSS) vulnerabilities in the MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the title parameter in the (1) edit or (2) add action in the user-users module or the (3) finduser action or the name parameter in an (4) edit action in the user-user module or the (5) editprofile action to modcp.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • MyBB/Mybb2 versions
    cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*range: <1.8.4
    • (no CPE)range: <1.8.4
  • MyBB/MyBBdescription
  • MyBB/MyBulletinBoardllm-fuzzy
    Range: <1.8.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.