CVE-2018-25116
MyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting
MEDIUM 5.1EPSS 0.3%
MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution.
- Affected
- jamiesage123 · MyBB Thread Redirect Plugin
- CVSS v4.0 VULNCHECK
- 5.1 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS v3.1 VULNCHECK
- 6.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - EPSS
- 0.32% chance of exploitation in the next 30 days, 23rd percentile
- Published
- 2026-01-23
Proof-of-concept exploits (1)
Security advisories
- https://www.vulncheck.com/advisories/mybb-thread-redirect-plugin-cross-site-scripting
- jamiesage123/Thread-Redirect