CVE-2024-25006

XenForo versions prior to 2.2.14 are vulnerable to a Directory Traversal flaw with write access. This issue occurs when an authenticated user with permissions to administer styles uses a ZIP archive for Styles Import. An attacker could potentially exploit this to read arbitrary files on the serve...