CVE-2022-43708
MyBB 1.8.31 has a (issue 2 of 2) cross-site scripting (XSS) vulnerabilities in the post Attachments interface allow attackers to inject HTML by persuading the user to upload a file with specially crafted name
Date published : 2022-11-21
https://github.com/mybb/mybb/security/advisories/GHSA-p9m7-9qv4-x93w