Approved changes feed: RSS · Atom

cpe:2.3:a:dragonexpert:recent_threads_on_index:17.0:*:*:*:*:mybb:*:*

part: a version: 17.0 update: *

VendorDragonexpert (d26bc017-3009-50ee-90e2-f4724ee5bb2a)
ProductRecent Threads On Index (82ef8ceb-2d97-5e64-8021-0548e622efe9)
Edition*
Language*
Software edition*
Target softwaremybb
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25309 vulnerable 2026-06-08 05:11:29.763569 MyBB Recent threads 17.0 Persistent Cross-Site Scripting
HIGH (7.2)
MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines. Attackers can create threads with script tags in the subject parameter to execute arbitrary JavaScript in the browsers of all users viewing the index page.
Published: 2026-04-29T19:24:39.993Z
Updated: 2026-05-24T01:36:17.351Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.