CVE-2021-47905

5.1 mediumEPSS 0.2%

Medium (5.1) in mybb delete account. EPSS 0.2% chance of exploitation in the next 30 days.

MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletion reason input field. Attackers can inject malicious scripts that will execute in the admin interface when viewing delete account reasons.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mybb:delete_account

References

https://github.com/vintagedaddyo/MyBB_Plugin-Delete_Account/
https://www.exploit-db.com/exploits/49500
https://www.vulncheck.com/advisories/mybb-delete-account-plugin-cross-site-scripting
https://www.exploit-db.com/exploits/49500

Check your stack JSON