High severity7.2NVD Advisory· Published Apr 29, 2026· Updated May 1, 2026
CVE-2018-25309
CVE-2018-25309
Description
MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines. Attackers can create threads with script tags in the subject parameter to execute arbitrary JavaScript in the browsers of all users viewing the index page.
Affected products
1- cpe:2.3:a:dragonexpert:recent_threads_on_index:17.0:*:*:*:*:mybb:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.exploit-db.com/exploits/44420nvdExploitVDB Entry
- www.vulncheck.com/advisories/mybb-recent-threads-persistent-cross-site-scriptingnvdThird Party Advisory
- community.mybb.com/mods.phpnvdProduct
News mentions
0No linked articles in our index yet.