A remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests.
View the template here CVE-2023-43187.yaml
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-43187