CVE-2018-25116

5.1 mediumEPSS 0.3%

Medium (5.1) in mybb thread redirect. EPSS 0.3% chance of exploitation in the next 30 days.

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mybb:thread_redirect

References

https://github.com/jamiesage123/Thread-Redirect
https://www.exploit-db.com/exploits/49505
https://www.vulncheck.com/advisories/mybb-thread-redirect-plugin-cross-site-scripting

Check your stack JSON