CVE-2018-25132 — MyBB Trending Widget Plugin 1.2 - Cross-Site Scripting
MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify threa…
Published: 2026-01-23 · CVSS: 5.1 · CVSS 4.0
MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7