CVE-2026-73320

XenForo before 2.3.13 is affected by an unauthenticated information disclosure vulnerability in the unfurl endpoint . Attackers can supply predictable auto-increment primary key IDs to retrieve rendered preview HTML, original URLs, and query strings from private conversations and other restricted...