CVE-2018-25116

Published January 23rd, 2026

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution.

jamiesage123/Thread-Redirect

MyBB plugin that allows threads to redirect to a URL with optional custom text

GitHub