- How many CVEs does MyBB have?
- MyBB has 177 published CVE records since 2005, including 38 in the last two years.
- How many MyBB CVEs are in CISA KEV?
- None of MyBB's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which MyBB products have the most CVEs?
- The MyBB products with the most published CVEs are mybb, merge system, myBB forums, ban list, Forum Software.
- What are the most common weakness types in MyBB CVEs?
- MyBB's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
- Are there public exploits for MyBB vulnerabilities?
- Yes — 71 of MyBB's CVEs have a known public exploit.
- How many critical MyBB vulnerabilities are there?
- MyBB has 14 critical and 49 high-severity CVEs.
- What is the average severity of MyBB CVEs?
- The average CVSS base score across MyBB's scored CVEs is 6.3.
