CVE-2021-27279
MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).
Date published : 2021-02-22
https://github.com/mybb/mybb/commit/cb781b49116bf5c4d8deca3e17498122b701677a
https://github.com/mybb/mybb/security/advisories/GHSA-6483-hcpp-p75w