medium6.2
CVE-2025-71280
XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems.
Impact
XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems. On systems where multiple users share a browser or machine, cached account pages could expose sensitive user information to other local users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xenforo | Xenforo | before 2.3.7 |