Redworm

**Name of the Vulnerable Software and Affected Versions** MyBB versions 1.1.7 and possibly other versions **Description** A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via a GIF image containing URL-encoded Javascript. This is rendered by Internet Explorer. **Recommendations** For MyBB version 1.1.7, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.