CVE-2025-67163

Name of the Vulnerable Software and Affected Versions Simple Machines Forum version 2.1.6

Description A stored cross-site scripting (XSS) issue exists in Simple Machines Forum. Successful exploitation allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Forum Name parameter.

Recommendations Update Simple Machines Forum to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize all user-supplied input for the Forum Name parameter to prevent the injection of malicious scripts.