CVE-2011-4569: Tom K Forum Userbar Plugin

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter.

Affected products

• Tom K Forum Userbar Plugin: version 2.2 only

Published 2011-11-29. Last modified 2026-06-16.