CVE-2018-10678: Mybb

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

MyBB 1.8.15, when accessed with Microsoft Edge, mishandles 'target="_blank" rel="noopener"' in A elements, which makes it easier for remote attackers to conduct redirection attacks.

Affected products

• Mybb Mybb: version 1.8.15 only

Published 2018-05-13. Last modified 2026-06-17.