SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.
{ "cpes": [ "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*" ], "severity": "High" }