CVE-2025-67163: Simplemachines Simple Machines Forum

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A stored cross-site scripting (XSS) vulnerability in Simple Machines Forum v2.1.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Forum Name parameter.

Affected products

• Simplemachines Simple Machines Forum: version 2.1.6 only

Published 2025-12-18. Last modified 2026-06-17.