MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).
{ "cpes": [ "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*" ], "severity": "Medium" }
"https://github.com/bitnami/vulndb/tree/main/data/mybb/BIT-mybb-2021-27279.json"