Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Xenforo — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Xenforo, with AI-generated Chinese analysis, references, and POCs.

Vendor: Xenforo

CVE IDTitleCVSSSeverityPublished
CVE-2026-35057 XenForo Stored Cross-Site Scripting via Structured Text Mentions CWE-79 6.4 Medium2026-04-01
CVE-2026-35056 XenForo Remote Code Execution via Authenticated Admin CWE-94 7.2 High2026-04-01
CVE-2026-35055 XenForo Cross-Site Scripting via Lightbox in Posts CWE-79 6.1 Medium2026-04-01
CVE-2026-35054 XenForo Stored Cross-Site Scripting via BB Code Rendering CWE-79 6.4 Medium2026-04-01
CVE-2025-71282 XenForo Path Disclosure via open_basedir Exceptions CWE-209 7.5 High2026-04-01
CVE-2025-71281 XenForo Template Method Call Restriction Bypass CWE-94 8.8 High2026-04-01
CVE-2025-71280 XenForo Local Account Page Caching Information Disclosure CWE-200 6.2 Medium2026-04-01
CVE-2025-71279 XenForo Passkey Security Bypass CWE-287 9.8 Critical2026-04-01
CVE-2025-71278 XenForo OAuth2 Unauthorized Scope Request CWE-863 8.8 High2026-04-01
CVE-2024-58342 XenForo Open Redirect via getDynamicRedirect CWE-601 6.3 Medium2026-04-01
CVE-2023-53904 Xenforo 2.2.13 Authenticated Stored Cross-Site Scripting via Smilie Categories CWE-79 4.6 Medium2025-12-17

All 11 known CVE vulnerabilities affecting Xenforo with full Chinese analysis, references, and POCs where available.