VulnCheck

FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition

FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler

XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser

XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint

XenForo < 2.3.13 XSS via Dynamic Redirect Handler

XenForo < 2.3.13 Missing Authorization via force-agreement Controller

XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher

XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider

XenForo < 2.3.13 SSRF via PayPal REST Webhook Handler

XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook