https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:38:27.603601+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319216 EUVD-2026-319216 2026-10-10T14:38:27.635265+00:00 EUVD-2026-319216 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47934 fkie_cve-2021-47934 2026-10-10T14:38:27.635299+00:00

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio. Attackers can also exploit a cross-site request forgery vulnerability in the timeline.php profile action to change a user's cover picture by crafting malicious forms that execute when victims visit affected profiles.

 https://cve.radiocsirt.org/vuln/ghsa-9cv3-xr79-r4jw GHSA-9cv3-xr79-r4jw 2026-10-10T14:38:27.635334+00:00

MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and Bio. Attackers can also exploit a cross-site request forgery vulnerability in the timeline.php profile action to change a user's cover picture by crafting malicious forms that execute when victims visit affected profiles.