A vulnerability, which was classified as problematic, was found in My Arcade Plugin 1.3 on MyBB. Affected by this issue is some unknown functionality. Executing a manipulation of the argument Comment can lead to cross site scripting.

This vulnerability appears as CVE-2018-25249. The attack may be performed from remote. In addition, an exploit is available.