NextGuard
UNKNOWNCVE-2025-71280

XenForo Local Account Page Caching Information Disclosure

Platform

php

Component

xenforo

Fixed in

2.3.7

View on NVD

XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems. On systems where multiple users share a browser or machine, cached account pages could expose sensitive user information to other local users.

How to fix

Actualice XenForo a la versión 2.3.7 o posterior. Esta versión corrige la vulnerabilidad de caché de páginas de cuentas locales que podría exponer información sensible en sistemas compartidos.

Monitor your dependencies automatically

Get notified when new vulnerabilities affect your projects. Free forever.

Start free