Security Advisory

CVE-2019-16759

9.8
CRITICAL

Vulnerability Description

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.
Published Date September 24, 2019
Official Source NIST NVD Advisory
Browse More Advisories