Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."
https://github.com/vanillaforums/Garden/commit/b9a10dabb15c697347bfa7baef69a6e211b2f804
https://exchange.xforce.ibmcloud.com/vulnerabilities/84167
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3463
http://vanillaforums.org/discussion/23339/security-update-vanilla-2-0-18-7