← All advisories

High severity8.8NVD Advisory· Published Jun 16, 2024· Updated Jun 17, 2026

CVE-2024-38458

CVE-2024-38458

Description

Xenforo before 2.2.16 allows code injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Xenforo/Xenforo3 versions
cpe:2.3:a:xenforo:xenforo:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:xenforo:xenforo:*:*:*:*:*:*:*:*range: <2.2.16
- (no CPE)
- (no CPE)range: <2.2.16

Patches

Vulnerability mechanics

References

2

xenforo.com/community/threads/xenforo-2-1-15-patch-1-2-2-16-patch-2-and-xenforo-media-gallery-2-1-9-2-2-6-released-includes-security-fixes.222133/nvdPatchRelease Notes
seclists.org/fulldisclosure/2024/Jul/12nvdExploitMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.