writeups.xyz / SSD Advisory – XenForo RCE Via CSRF

Submitter : c2a

Date: 16 July 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• CSRF
• Security Code Review

Programs :

• XenForo

Authors :

• Egidio Romano / EgiX

Link :
https://ssd-disclosure.com/ssd-advisory-xenforo-rce-via-csrf/