Mybb Trending Widget vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mybb Trending Widget: 1 record(s), with affected versions and fixes.
cpe:2.3:a:mybb:trending_widget

CVE-2018-25132 Medium · 6.1 CWE-79 Jan 23, 2026

MyBB Trending Widget Plugin 1.2 - Cross-Site Scripting

MyBB Trending Widget Plugin 1.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through thread titles. Attackers can modify thread titles with script payloads that will execute when other users view the trending widget.