MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).
Go to Source of this post
Author Of this post:

By admin