CVE-2019-16759
vBulletin vBulletin
vBulletin PHP Module Remote Code Execution Vulnerability
What it is
The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.