Unrated severityNVD Advisory· Published Apr 14, 2023· Updated Aug 2, 2024

CVE-2023-27890

Description

The Export User plugin through 2.0 for MyBB allows XSS during the process of an admin generating DSGVO data for a user, via the Custom User Title, Location, or Bio field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MyBB/Export User plugindescription
Netic/User Exportllm-fuzzy
Range: <=2.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/171421/MyBB-Export-User-2.0-Cross-Site-Scripting.htmlmitre
community.mybb.com/mods.phpmitre
community.mybb.com/user-121250.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000