VWE-2019-5241 Viewing Source [template]Vulnerability | cve= | aka= | severity=Low | difficulty=Hard | description=Permissions Escalation. Users can view the output of certain sidebar-type WIDGET BB-Codes without permission, as long as they have permission to view output of a specific other sidebar-type widget, which varies from case to case. | platform=XF2 | lite=no | issueid= | discover-date=May 10, 2019 | patch-date=June 7, 2019 | patches=4.1.0 Beta 2 | workaround=In the forum's BB-Code Manager, disable the WIDGET BB-Code. [/template] 526 characters