Loading
Generated remediation guidance and an executive summary. No account required.
MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines. Attackers can create threads with script tags in the subject parameter to execute arbitrary JavaScript in the browsers of all users viewing the index page.
No affected products information available.
Use CWE-79 to widen CVE-2018-25309 into its surrounding weakness, vendor, and product context.