Join us January 28th for the first In the Wild with VulnCheck webinar
Register now
Products
Government
Resources
Community
Company
Partners
Sign In / Join
Sign In
Advisories
MyBB Delete Account Plugin 1.4 - Cross-Site Scripting
Go Back
severity
medium
date
January 22, 2026
Affecting
MyBB Delete Account Plugin 1.4
CVE
CVE-2021-47905
CWE
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS
5.1
CVSS V4 Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
References
ExploitDB-49500
MyBB Delete Account Plugin Repository
Credit
0xB9
Description
MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field. Attackers can inject malicious scripts that will execute in the admin interface when viewing delete account reasons.