MyBB Visual Editor versions 1.8.18 and below suffer from a cross site scripting vulnerability.

Link: https://packetstormsecurity.com/files/149469/mybbve1818-xss.txt