Security Advisory

CVE-2026-35057

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-01 00:30:14

Last updated 2026-05-24 01:37:47

Assigner VulnCheck

State PUBLISHED

Description

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting (XSS) in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content.

← Browse all CVEs View on cve.org ↗