MyBB Recent Threads On Index 17.0 Cross Site Scripting

MyBB Recent Threads On Index plugin version 17.0 suffers from a cross site scripting vulnerability.

MD5 | 8307c11ddec1b8fa0f7961c36a8fbefc

# Exploit Title: MyBB Recent threads
# Date: 4th April 2018
# Exploit Author: Perileos
# Software Link:
# Version: 17.0
# Tested on: Windows 10

1. Description:
This plugin shows recent threads in the side bar on your MyBB forum.

2. Proof of concept:

Persistent XSS
- Create a thread with the following subject <p
- Navigate to the index to see a board wide persistent XSS alert.

Related Posts