CVE-2021-47934

Name of the Vulnerable Software and Affected Versions MyBB Timeline Plugin version 1.0

Description Cross-site scripting issues allow the injection of malicious scripts via thread titles, post content, and user profile fields such as Location and Bio. Additionally, a cross-site request forgery flaw exists in the 'timeline.php' profile action, enabling attackers to change a user's cover picture by crafting malicious forms that execute when victims visit affected profiles.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.