What’s Vulnerable › Vulnerabilities

CVE-2019-25093: dragonexpert Recent Threads on Index Setting hooks.php recentthread_list_threads cross site scripting

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-02 · updated 2026-06-17
• Weakness: CWE-79

Description

A vulnerability, which was classified as problematic, was found in dragonexpert Recent Threads on Index. Affected is the function recentthread_list_threads of the file inc/plugins/recentthreads/hooks.php of the component Setting Handler. The manipulation of the argument recentthread_forumskip leads to cross site scripting. It is possible to launch the attack remotely. The patch is identified as 051465d807a8fcc6a8b0f4bcbb19299672399f48. It is recommended to apply a patch to fix this issue. VDB-217182 is the identifier assigned to this vulnerability.

Affected products

• dragonexpert Recent Threads on Index: before 2019-02-06 — fixed in 2019-02-06

How to fix

Upgrade to a fixed version: dragonexpert Recent Threads on Index 2019-02-06. Check the vendor advisory for mitigations.

References

• https://github.com/dragonexpert/recentthreads/commit/051465d807a8fcc6a8b0f4bcbb19299672399f48
• https://vuldb.com/?ctiid.217182
• https://vuldb.com/?id.217182
• https://github.com/dragonexpert/recentthreads/commit/051465d807a8fcc6a8b0f4bcbb19299672399f48
• https://vuldb.com/?ctiid.217182
• https://vuldb.com/?id.217182

Get alerted when CVE-2019-25093 or the next vulnerability affects your stack