Vulnerability CVE-2024-38457

Vulnerability CVE-2024-38457

Published: 2024-06-16

Description:

Xenforo before 2.2.16 allows CSRF.

See advisories in our WLB2 database:

	Topic	Author	Date
Low	XenForo 2.2.15 Cross Site Request Forgery	EgiX	17.07.2024

Type:

CWE-352

(Cross-Site Request Forgery (CSRF))

References:

https://xenforo.com/community/threads/xenforo-2-1-15-patch-1-2-2-16-patch-2-and-xenforo-media-gallery-2-1-9-2-2-6-released-includes-security-fixes.222133/

Vulnerability CVE-2024-38457

Xenforo before 2.2.16 allows CSRF.

See advisories in our WLB2 database:

Low

XenForo 2.2.15 Cross Site Request Forgery

CWE-352

References: