CVE-2018-25116: Mybb Thread Redirect

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution.

Affected products

• Mybb Thread Redirect: version 0.2.1 only

Published 2026-01-23. Last modified 2026-06-17.