Total vulnerabilities in the database
vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories.
CVSS v3:
CVSS v2:
CWEs: