Unrated
inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.
CVE-2018-14888
First seen on SecPulse
References
- advisory community.mybb.com
- patch github.com
- report packetstormsecurity.com
- report exploit-db.com