Medium severity5.4NVD Advisory· Published Dec 22, 2025· Updated Jun 17, 2026

CVE-2023-53976

Description

myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the template management system that allows authenticated administrators to inject malicious scripts when creating new templates. Attackers can exploit this vulnerability by inserting script payloads in the template title field when adding new templates through the 'Templates and Style' > 'Templates' > 'Manage Templates' > 'Global Templates' interface, causing arbitrary JavaScript to execute when the template is viewed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MyBB/Mybb
cpe:2.3:a:mybb:mybb:1.8.26:*:*:*:*:*:*:*
MyBB/myBB Forumsllm-fuzzy
Range: =1.8.26

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/51136nvdExploit
www.vulncheck.com/advisories/mybb-forums-stored-cross-site-scripting-via-template-managementnvdExploitThird Party Advisory
mybb.comnvdProduct
www.cve.org/CVERecordnvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000