PT-2020-6319

Name of the Vulnerable Software and Affected Versions vBulletin versions 5.5.4 through 5.6.2 Description The issue allows remote command execution via crafted subWidgets data in an "ajax/render/widget tabbedcontainer tab panel" request. This is due to an incomplete fix for a previous issue. The...