Description
vBulletin (vB) is a proprietary Internet forum software package developed by vBulletin Solutions, Inc. A vulnerability exists in vBulletin 5 CONNECT (versions 5.1.19 and bellow) that may allow an attacker to execute arbitrary PHP code via an unsafe unserialize() call.
Remediation
Upgrade to the latest version of vBulletin.
References
Related Vulnerabilities
Server-side template injection
WordPress Plugin Master Popups Remote Code Execution (1.0.0)
WordPress Plugin Dynamic Content for Elementor Remote Code Execution (1.9.5.6)
WordPress Plugin Easy Forms for Mailchimp PHP Code Injection (6.5.2)
WordPress Plugin Gutenberg Block Editor Toolkit-EditorsKit Remote Code Execution (1.31.5)