agentprime: xenforo

agentprime: xenforoEvery new CVE for xenforo.https://agentprime.io/CVE-2026-74239: XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windowshttps://agentprime.io/advisories/CVE-2026-74239/https://agentprime.io/advisories/CVE-2026-74239/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:20:34 GMTCVECVE-2026-73321: XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parserhttps://agentprime.io/advisories/CVE-2026-73321/https://agentprime.io/advisories/CVE-2026-73321/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:20:16 GMTCVECVE-2026-73320: XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpointhttps://agentprime.io/advisories/CVE-2026-73320/https://agentprime.io/advisories/CVE-2026-73320/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:19:57 GMTCVECVE-2026-73319: XenForo < 2.3.13 XSS via Dynamic Redirect Handlerhttps://agentprime.io/advisories/CVE-2026-73319/https://agentprime.io/advisories/CVE-2026-73319/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:19:39 GMTCVECVE-2026-73318: XenForo < 2.3.13 Missing Authorization via force-agreement Controllerhttps://agentprime.io/advisories/CVE-2026-73318/https://agentprime.io/advisories/CVE-2026-73318/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:19:14 GMTCVECVE-2026-73317: XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcherhttps://agentprime.io/advisories/CVE-2026-73317/https://agentprime.io/advisories/CVE-2026-73317/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:18:55 GMTCVECVE-2026-73316: XenForo < 2.3.13 Payment Replay via PayPal REST Payment Providerhttps://agentprime.io/advisories/CVE-2026-73316/https://agentprime.io/advisories/CVE-2026-73316/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:18:35 GMTCVECVE-2026-73315: XenForo < 2.3.13 SSRF via PayPal REST Webhook Handlerhttps://agentprime.io/advisories/CVE-2026-73315/https://agentprime.io/advisories/CVE-2026-73315/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:18:16 GMTCVECVE-2026-73314: XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhookhttps://agentprime.io/advisories/CVE-2026-73314/https://agentprime.io/advisories/CVE-2026-73314/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:17:52 GMTCVECVE-2026-73313: XenForo < 2.3.13 MFA Bypass via Passkey TFA Providerhttps://agentprime.io/advisories/CVE-2026-73313/https://agentprime.io/advisories/CVE-2026-73313/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:17:30 GMTCVECVE-2026-73312: XenForo < 2.3.13 Refresh Token Replay via Expired Access Tokenhttps://agentprime.io/advisories/CVE-2026-73312/https://agentprime.io/advisories/CVE-2026-73312/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:16:53 GMTCVEcriticalCVE-2026-73311: XenForo < 2.3.13 OAuth2 Authorization Code Reusehttps://agentprime.io/advisories/CVE-2026-73311/https://agentprime.io/advisories/CVE-2026-73311/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:16:31 GMTCVEcriticalCVE-2026-73310: XenForo < 2.3.13 OAuth2 Authorization Code Token Theft via redirect_uri Bypasshttps://agentprime.io/advisories/CVE-2026-73310/https://agentprime.io/advisories/CVE-2026-73310/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:16:14 GMTCVECVE-2026-73309: XenForo < 2.3.13 Authentication Bypass via OAuth2 Token Endpointhttps://agentprime.io/advisories/CVE-2026-73309/https://agentprime.io/advisories/CVE-2026-73309/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 13:15:50 GMTCVEcriticalCVE-2026-35057: XenForo Stored Cross-Site Scripting via Structured Text Mentionshttps://agentprime.io/advisories/CVE-2026-35057/https://agentprime.io/advisories/CVE-2026-35057/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:30:14 GMTCVECVE-2026-35056: XenForo Remote Code Execution via Authenticated Adminhttps://agentprime.io/advisories/CVE-2026-35056/https://agentprime.io/advisories/CVE-2026-35056/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:30:13 GMTCVECVE-2026-35055: XenForo Cross-Site Scripting via Lightbox in Postshttps://agentprime.io/advisories/CVE-2026-35055/https://agentprime.io/advisories/CVE-2026-35055/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:30:13 GMTCVECVE-2026-35054: XenForo Stored Cross-Site Scripting via BB Code Renderinghttps://agentprime.io/advisories/CVE-2026-35054/https://agentprime.io/advisories/CVE-2026-35054/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:30:12 GMTCVECVE-2025-71282: XenForo Path Disclosure via open_basedir Exceptionshttps://agentprime.io/advisories/CVE-2025-71282/https://agentprime.io/advisories/CVE-2025-71282/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:30:11 GMTCVECVE-2025-71281: XenForo Template Method Call Restriction Bypasshttps://agentprime.io/advisories/CVE-2025-71281/https://agentprime.io/advisories/CVE-2025-71281/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:30:10 GMTCVECVE-2025-71280: XenForo Local Account Page Caching Information Disclosurehttps://agentprime.io/advisories/CVE-2025-71280/https://agentprime.io/advisories/CVE-2025-71280/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:30:10 GMTCVECVE-2025-71279: XenForo Passkey Security Bypasshttps://agentprime.io/advisories/CVE-2025-71279/https://agentprime.io/advisories/CVE-2025-71279/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:30:09 GMTCVEcriticalCVE-2025-71278: XenForo OAuth2 Unauthorized Scope Requesthttps://agentprime.io/advisories/CVE-2025-71278/https://agentprime.io/advisories/CVE-2025-71278/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:30:08 GMTCVECVE-2024-58342: XenForo Open Redirect via getDynamicRedirecthttps://agentprime.io/advisories/CVE-2024-58342/https://agentprime.io/advisories/CVE-2024-58342/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 00:30:07 GMTCVECVE-2023-53904: Xenforo 2.2.13 Authenticated Stored Cross-Site Scripting via Smilie Categorieshttps://agentprime.io/advisories/CVE-2023-53904/https://agentprime.io/advisories/CVE-2023-53904/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Dec 2025 22:44:43 GMTCVE