MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with high privileges, to achieve local file inclusion and execution.
{ "cpes": [ "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*" ], "severity": "High" }