| Package | Affected versions | Patched versions |
|---|---|---|
| xenforo | ≥ 2.3.0, < 2.3.9< 2.2.18 | 2.3.92.2.18 |
XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users. An attacker with admin panel access can execute arbitrary code on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free