CVE-2021-47905

6.1 MEDIUM

Published: January 23, 2026 Modified: April 09, 2026

Description

MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field. Attackers can inject malicious scripts that will execute in the admin interface when viewing delete account reasons.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://github.com/vintagedaddyo/MyBB_Plugin-Delete_Account/

Source: disclosure@vulncheck.com

Product

https://www.exploit-db.com/exploits/49500

Source: disclosure@vulncheck.com

Exploit VDB Entry

https://www.vulncheck.com/advisories/mybb-delete-account-plugin-cross-site-scripting

Source: disclosure@vulncheck.com

Third Party Advisory

https://www.exploit-db.com/exploits/49500

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Exploit VDB Entry

4 reference(s) from NVD

Quick Stats

CVSS v3 Score

6.1 / 10.0

EPSS (Exploit Probability)

0.0%

10th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-79

Affected Vendors

mybb

Related CVEs