CVE-2022-45867: Mybb

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with high privileges, to achieve local file inclusion and execution.

Affected products

• Mybb Mybb: before 1.8.33 (fixed in 1.8.33)

Published 2023-01-03. Last modified 2026-06-17.