CVE-2008-3069: Mybb

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) portal.php and (2) inc/functions_post.php.

Affected products

• Mybb Mybb: up to and including 1.2.12

Published 2008-07-08. Last modified 2026-06-16.