medium4.9
CVE-2022-43709
MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input…
Impact
MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybb | Mybb | before 1.8.32 |