CVE-2022-43709

Description

MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings.

Related CPE's

References

https://github.com/mybb/mybb/security/advisories/GHSA-ggp5-454p-867v

https://mybb.com

CvssV3 impact

CvssV2 impact