VWE-2020-5805 Viewing Source [template]Vulnerability | aka= | severity=Medium | difficulty=Normal | description=Permissions Escalation. Hook bbcode_parse_start sees NULL for $forumid in wiki content, which could cause parsing with parser settings for non-wiki content, regardless of area settings, with certain third-party add-ons such as CES Parser Permissions. | platform=vB | lite= | issueid= | discover-date=April 14, 2020 | patch-date=May 7, 2020 | patches=4.1.0 RC 2 Patch Level 2 4.1.0 RC 1 Patch Level 3 4.0.28 Patch Level 3 4.0.27 Patch Level 6 4.0.26 Patch Level 8 | workaround= [/template] 587 characters