High severity7.2NVD Advisory· Published Apr 29, 2026· Updated May 1, 2026
CVE-2018-25309
CVE-2018-25309
Description
MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines. Attackers can create threads with script tags in the subject parameter to execute arbitrary JavaScript in the browsers of all users viewing the index page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:dragonexpert:recent_threads_on_index:17.0:*:*:*:*:mybb:*:*
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/44420nvdExploitVDB Entry
- www.vulncheck.com/advisories/mybb-recent-threads-persistent-cross-site-scriptingnvdThird Party Advisory
- community.mybb.com/mods.phpnvdProduct
News mentions
0No linked articles in our index yet.