CVE-2022-43709
MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP’s Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings.
Date published : 2022-11-21
https://github.com/mybb/mybb/security/advisories/GHSA-ggp5-454p-867v