CVE-2018-25116: MyBB Thread Redirect Plugin 0.2.1 - Cross-Site Scripting

Published Jan 23, 2026

Updated

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution.

Affected Software

2 affected components

MyBB MyBB Thread Redirect Plugin

MyBB Thread Redirect Mybb=0.2.1

Event History

Jan 23, 2026

CVE Published

via MITRE·04:47 PM

Data Sourced

via MITRE·04:47 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Nov 8, 58249

Event

via NVD·07:20 PM

Frequently Asked Questions

What is the severity of CVE-2018-25116?

The CVE-2018-25116 vulnerability is considered a medium severity due to its potential for cross-site scripting attacks.

How do I fix CVE-2018-25116?

To fix CVE-2018-25116, update the MyBB Thread Redirect Plugin to the latest version that addresses the cross-site scripting vulnerability.

What are the risks associated with CVE-2018-25116?

The risks associated with CVE-2018-25116 include the potential for attackers to execute malicious scripts in the context of a user's browser.

Who is affected by CVE-2018-25116?

Users of MyBB Thread Redirect Plugin version 0.2.1 are affected by CVE-2018-25116.

Can CVE-2018-25116 be exploited remotely?

Yes, CVE-2018-25116 can be exploited remotely, allowing attackers to inject scripts through the vulnerable custom text input field.