VULNERABILITY INTELLIGENCE

CVE-2019-12830

CVSS score8.7 HIGH

EPSS probability0.96%

CISA KEVNot currently listed

Published2019-06-15

Last modified2026-06-17

Description

In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to [video] BBCode persistent XSS to take over any forum account, aka a nested video MyCode issue.