Security Advisory
CVE-2018-25116
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
MyBB Thread Redirect Plugin 0.2.1 contains a cross-site scripting vulnerability in the custom text input field for thread redirects. Attackers can inject malicious SVG scripts that will execute when other users view the thread, allowing arbitrary script execution.