CVE-2018-14888

inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.

Date published : 2018-08-14

https://community.mybb.com/mods.php?action=changelog&pid=360

https://github.com/mybbgroup/MyBB_Thank-you-like-plugin/pull/199