Description

SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.

Remediation

References

CVE-2021-27890

Related Vulnerabilities

WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.11)

phpMyFAQ Authentication Bypass by Capture-replay Vulnerability (CVE-2023-1886)

WordPress Plugin XData Toolkit Arbitrary File Upload (1.9)

WordPress Plugin Duplicator-WordPress Migration Arbitrary File Disclosure (0.3.0)

WordPress Plugin vSlider Multi Image Slider for WordPress Multiple Vulnerabilities (4.1.2)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2021-27890