CVE-2026-35054

Mô tả

Tham khảo

• vulncheck.com/advisories/xenforo-stored-cross-site-scripting-via-bb-code-rendering · Third Party Advisory
• xenforo.com/community/threads/xenforo-2-3-9-inc-xfmg-2-2-18-released-security-fix.235659 · Release Notes

Lỗ hổng khác của xenforo

• CVE-2026-74239CAO 7.2XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated…
• CVE-2026-73321TRUNG BÌNH 6.5XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause per…
• CVE-2026-73320TRUNG BÌNH 6.1XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve pri…
• CVE-2026-73319TRUNG BÌNH 6.1XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynamic redirect handler that allows unauthenticated attackers to…
• CVE-2026-73318THẤP 3.8XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to …