An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9.
An Access Control
Exploit
CVE-2011-3614
NVD
Refer to CVE-2011-3614 NVD advisory