CVE-2024-25006

XenForo versions prior to 2.2.14 are vulnerable to a Directory Traversal flaw with write access. This vulnerability affects the Styles Import functionality when an authenticated user with permissions to administer styles uses a ZIP archive . An attacker could potentially read arbitrary files on t...