CVE-2018-25116 MEDIUM

CVE-2018-25116: MyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting

Vendor Jamiesage123
Product MyBB Thread Redirect Plugin
Weakness CWE-79 · XSS
Published January 23, 2026
Last update January 23, 2026
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

What the vulnerability does

01Description

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution.

Key dates

02Disclosure timeline

January 23, 2026 CVE published
January 23, 2026 Record updated