VulnCheck

XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows

XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser

XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint

XenForo < 2.3.13 XSS via Dynamic Redirect Handler

XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher

FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition

FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()

FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler

GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client

AJCloud AJY IPC Firmware Path Traversal via jdbhttpd