In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event.
- http://seclists.org/fulldisclosure/2017/Apr/53
No PoCs found on GitHub currently.