Launchpad.net

CVE 2019-3578

MyBB 1.8.19 has XSS in the resetpassword function.

See the CVE page on Mitre.org for more details.