Unrated severityNVD Advisory· Published Feb 2, 2024· Updated May 7, 2025

CVE-2024-25006

Description

XenForo before 2.2.14 allows Directory Traversal (with write access) by an authenticated user who has permissions to administer styles, and uses a ZIP archive for Styles Import.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xenforo/Xenforollm-fuzzy
Range: <2.2.14

Patches

Vulnerability mechanics

References

xenforo.com/community/threads/xenforo-2-2-14-released.219044/mitre
xenforo.com/docs/xf2/permissions/mitre
xenforo.com/tickets/BC37EB98/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000