CyberRota
Back to database

CVE-2018-25309

HIGH · CVSS 7.2 EPSS 0.03% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-04-29 · Last synced: 2026-05-29

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

External Security References

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2018-25309
Severity
HIGH
CVSS
7.2
EPSS
0.03%
Java

Original NVD Description

MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines. Attackers can create threads with script tags in the subject parameter to execute arbitrary JavaScript in the browsers of all users viewing the index page.