I (Jones) send a message to myself with another user as BCC. When I'm using the Quick Reply (not sure whether the full reply has the same error) to answer (still logged in as Jones) it will cause an error: "[...] Invalid recipients: <!-- start: private_read_bcc --> <br />BCC: <a href=". Likely a variable is used twice.
This also happens in some other cases, eg I have a pm send to a user and one bcc and when I view that PM in my send messages folder the quick reply gets a hidden field which value is an unescaped template instead of the username(s)
Hi,
Thank you for your report. We have pushed this issue to our Github repository for further analysis where you can track our commits and progress with fixing this bug. Discussions regarding this bug may also take place there too.
Follow this link to visit the issue on Github:
https://github.com/mybb/mybb/issues/2093
Thanks for contributing to MyBB!
Regards,
The MyBB Group