CVE-2018-25247

Name of the Vulnerable Software and Affected Versions MyBB Like Plugin version 3.0.0

Description A stored cross-site scripting issue exists where authenticated attackers can inject malicious scripts into post or thread subjects. The problem occurs because the software fails to sanitize the subject content when displaying liked posts on a user profile, leading to the execution of the script in the browser of any user viewing that profile.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.