← All credits
Marco Paciaroni (BomboBombone)
14 vulnerability records and advisories credit this contributor.
CVE-2026-73321
XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser
CVE-2026-73316
XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider
CVE-2026-73311
XenForo < 2.3.13 OAuth2 Authorization Code Reuse
CVE-2026-73319
XenForo < 2.3.13 XSS via Dynamic Redirect Handler
CVE-2026-73314
XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook
CVE-2026-73309
XenForo < 2.3.13 Authentication Bypass via OAuth2 Token Endpoint
CVE-2026-74239
XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows
CVE-2026-73320
XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint
CVE-2026-73318
XenForo < 2.3.13 Missing Authorization via force-agreement Controller
CVE-2026-73317
XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher