CVE-2025-31118 - CVE House

Back to Database

Status published High CVE-2025-31118

NamelessMC Has Forum Reply Submission Time Limit Bypass

7.1 CVSS

Vulnerability Description

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, forum quick reply feature (view_topic.php) does not implement any spam prevention mechanism. This allows authenticated users to continuously post replies without any time restriction, resulting in an uncontrolled surge of posts that can disrupt normal operations. This issue has been patched in version 2.2.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-31118

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from NamelessMC

View All →

NamelessMC allows Stored Cross Site Scripting (XSS) in SEO component

NamelessMC allows sensitive information disclosure in member list component

NamelessMC allows Stored Cross-Site Scripting (XSS) in dashboard text editor

NamelessMC Vulnerable to SQL Injections in /user/messaging and /panel/users/reports Pages

NamelessMC Vulnerable to Cookie-Based View Count Manipulation

Affected Vendor

NamelessMC

View all reports →

Affected Software

Nameless

Vulnerable Versions:

< 2.2.0

Timeline

Official Publish: April 18th, 2025

Last Modified: April 18th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1498 Network Denial of Service