diff --git a/modules/exploits/multi/http/vbulletin_widget_template_rce.rb b/modules/exploits/multi/http/vbulletin_widget_template_rce.rb
index 759a6164c6..e64955e349 100644
--- a/modules/exploits/multi/http/vbulletin_widget_template_rce.rb
+++ b/modules/exploits/multi/http/vbulletin_widget_template_rce.rb
@@ -30,7 +30,7 @@ class MetasploitModule < Msf::Exploit::Remote
         ],
         'References' => [
           ['URL', 'https://blog.exploitee.rs/2020/exploiting-vbulletin-a-tale-of-patch-fail/'],
-          ['CVE', '2020-7373']
+          ['CVE', '2020-17496']
         ],
         'DisclosureDate' => '2020-08-09',
         'License' => MSF_LICENSE,