CVE-2018-25249

MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through arcade game score comments. Attackers can add crafted HTML and JavaScript payloads in the comment field that execute when other users view or edit...

CVE-2018-25250 MyBB Last User's Threads in Profile Plugin 1.2 Persistent XSS

MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users...

CVE-2018-25249

CVE-2018-25249 concerns the MyBB My Arcade Plugin 1.3, which contains a persistent cross-site scripting (XSS) vulnerability in the arcade game score comments. The issue allows authenticated users to inject HTML/JavaScript payloads in the comment field, which execute when other users view or edit ...

CVE-2018-25248

The CVE-2018-25248 entry concerns the MyBB Downloads Plugin 2.0.3, which is affected by a persistent cross-site scripting (XSS) vulnerability in the download title field. The issue allows regular members to submit a new download containing HTML/JavaScript code in the title parameter, which is exe...

CVE-2018-25247

MyBB Like Plugin 3.0.0 contains a stored cross-site scripting vulnerability. Authenticated attackers can inject script payloads into post or thread subjects; when other users view a profile that displays the attacker's liked posts, the unsanitized subject is rendered, executing the script in the...

CVE-2018-25247 MyBB Like Plugin 3.0.0 Cross-Site Scripting via User Profiles

MyBB Like Plugin 3.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating posts or threads with unvalidated subject content. Attackers can craft post subjects containing script tags that execute when other users view the attacker's profile,...

CVE-2018-25244

Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by initiating a...

CVE-2018-25242

One Search 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting excessively long input strings to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar to trigger an unhandled exception...

CVE-2018-25237

creationtimestamp| type| source ---|---|--- 2026-04-03 22:47:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimsh5p3bo25 2026-04-04 01:31:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3min3m2q2gm2y...

CVE-2018-20852

creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

CVE-2018-25204

creationtimestamp| type| source ---|---|--- 2026-03-31 02:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mid5lf5jud2f...

CVE-2018-25230

creationtimestamp| type| source ---|---|--- 2026-03-30 12:58:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibpo52z2z2g...

CVE-2018-25229

creationtimestamp| type| source ---|---|--- 2026-03-30 12:53:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibpf6ms2722...

CVE-2018-25233

creationtimestamp| type| source ---|---|--- 2026-03-30 12:48:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibp4a6e4b2j...

CVE-2018-25234

creationtimestamp| type| source ---|---|--- 2026-03-30 12:42:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miborhjida2i...

CVE-2018-25228

creationtimestamp| type| source ---|---|--- 2026-03-30 12:37:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miboij2qfb2o...

CVE-2018-25231

creationtimestamp| type| source ---|---|--- 2026-03-30 12:22:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibnnmqzum22...

CVE-2018-25227

creationtimestamp| type| source ---|---|--- 2026-03-30 12:17:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibneoco5l2z...

CVE-2018-25226

creationtimestamp| type| source ---|---|--- 2026-03-30 12:09:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibmw6cszx2j...

CVE-2018-25235

creationtimestamp| type| source ---|---|--- 2026-03-30 12:05:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibmq7aitf2i...