VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Dec 22, 2025· Updated Jun 17, 2026

CVE-2023-53978

CVE-2023-53978

Description

myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum announcement system that allows authenticated administrators to inject malicious scripts when creating announcements. Attackers can exploit this vulnerability by inserting script payloads in the announcement title field when adding announcements through the 'Forums and Posts' > 'Forum Announcements' interface, causing arbitrary JavaScript to execute when the announcement is displayed on the forum.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • MyBB/Mybbinferred3 versions
    =1.8.26+ 2 more
    • (no CPE)range: =1.8.26
    • cpe:2.3:a:mybb:mybb:1.8.26:*:*:*:*:*:*:*
    • (no CPE)range: = 1.8.26
  • MyBB/myBB Forumsllm-fuzzy
    Range: = 1.8.26

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.