CVE-2018-14724: Mybb Ban List

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page.

Affected products

• Mybb Ban List: version 1.0 only

Published 2019-03-21. Last modified 2026-06-17.