GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Marco Paciaroni (BomboBombone)

14 vulnerability records and advisories credit this contributor.

CVE-2026-73320
XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint
CVE-2026-73319
XenForo < 2.3.13 XSS via Dynamic Redirect Handler
CVE-2026-73318
XenForo < 2.3.13 Missing Authorization via force-agreement Controller
CVE-2026-73317
XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher