CVE-2025-31118

PoC —

CVSS 3.1

7.1 high

EPSS

<1%p44

Published

Apr 18, 2025 (Apr 18, 2025)

Modified

Jun 17, 2026

Description

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, forum quick reply feature (view_topic.php) does not implement any spam prevention mechanism. This allows authenticated users to continuously post replies without any time restriction, resulting in an uncontrolled surge of posts that can disrupt normal operations. This issue has been patched in version 2.2.0.

Vendors: namelessmc
Products: nameless
Weakness: CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.