Simple Machines Forum version 2.1.4 suffers from an authenticated code injection vulnerability.