XenForo before 2.2.14 allows Directory Traversal with write access by an authenticated user who has permissions to administer styles, and uses a ZIP archive for Styles Import...
8.1CVSS6.8AI score0.0102EPSS
SaveExploits0References1
OSV•added 2024/02/29 1:44 a.m.•8 views
CVE-2024-25006
XenForo before 2.2.14 allows Directory Traversal with write access by an authenticated user who has permissions to administer styles, and uses a ZIP archive for Styles Import...
