Vulnerability Details CVE-2018-25116
MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 19.6%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2018-25116
-
cpe:2.3:a:mybb:thread_redirect:0.2.1