CVE Feed

    Dashboard / CVE / CVE-2025-31120

    CVE-2025-31120

    NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, an insecure view count mechanism in the forum page allows an unauthenticated attacker to artificially increase the view count. The application relies on a client-side cookie (nl-topic-[tid]) (or session variable for guests) to determine if a view should be counted. When a client does not provide the cookie, every page request increments the counter, leading to incorrect view metrics. This issue has been patched in version 2.2.0.

    Published:Apr 18, 2025
    Last Modified:May 13, 2025
    EPS:Apr 18, 2025
    EPSS Score:0.0005
    CVSS Score:5.3

    Affected Products

    Vendor
    Namelessmc
    Product
    Nameless

    Exploits

    https://github.com/NamelessMC/Nameless/security/advisories/GHSA-8jv7-77jw-h646https://github.com/NamelessMC/Nameless/security/advisories/GHSA-8jv7-77jw-h646

    Related CVEs

    CVE-2026-40571 (CVSS 5.3) — NamelessMC is website software for Minecraft servers. In version 2.2.4, `core/classes/Misc/ProfilePostReaction…
    CVE-2026-35447 (CVSS 5.3) — NamelessMC is website software for Minecraft servers. In version 2.2.4, the profile page (modules/Core/pages/p…
    CVE-2026-40314 (CVSS 6.9) — NamelessMC is website software for Minecraft servers. In version 2.2.4,`core/classes/Misc/ProfilePostReactionC…
    CVE-2026-35443 (CVSS 5.3) — NamelessMC is website software for Minecraft servers. In version 2.2.4, `modules/Forum/classes/ForumPostReacti…
    CVE-2026-34460 (CVSS 5.4) — NamelessMC is website software for Minecraft servers. In versions 2.2.4 and prior, the OAuth callback handling…
    CVE-2026-33398 (CVSS 7.1) — NamelessMC is website software for Minecraft servers. In version 2.2.4, `modules/Forum/pages/forum/get_quotes.…
    CVE-2026-32250 (CVSS 4.3) — NamelessMC is website software for Minecraft servers. A Reflected Cross-Site Scripting (XSS) vulnerability was…
    CVE-2025-54117 (CVSS 9) — NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS…
    CVE-2025-54421 (CVSS 7.2) — NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS…
    CVE-2025-54118 (CVSS 5.3) — NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Sensitive information dis…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High