Total vulnerabilities in the database
vBulletin through 5.5.4 mishandles custom avatars.
CVSS v3:
CVSS v2:
CWEs: