Approved changes feed: RSS · Atom

cpe:2.3:a:mybb:mybb:17.0:*:*:*:*:*:*:*

part: a version: 17.0 update: *

VendorMybb (8821e130-2590-5689-a7de-85bc65b3bdf4)
ProductMybb (0a7c5598-1dcf-5314-89b1-60f621a820e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25309 vulnerable 2026-06-03 14:38:41.397573 MyBB Recent threads 17.0 Persistent Cross-Site Scripting
HIGH (7.2)
MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines. Attackers can create threads with script tags in the subject parameter to execute arbitrary JavaScript in the browsers of all users viewing the index page.
Published: 2026-04-29T19:24:39.993Z
Updated: 2026-05-24T01:36:17.351Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.