VULNERABILITY INTELLIGENCE
CVE-2022-28354
CVSS score6.1 MEDIUM
EPSS probability0.54%
CISA KEVNot currently listed
Published2023-04-24
Last modified2026-06-17
Description
In the Active Threads Plugin 1.3.0 for MyBB, the activethreads.php date parameter is vulnerable to XSS when setting a time period.