CVE-2025-71281

CVE-2025-71281 concerns XenForo before 2.3.7 where template access restrictions on methods were too permissive. The root cause is a loose prefix match for methods accessible through callbacks and variable method calls in templates, allowing unauthorized method invocations. Documented impact is hi...