CVE-2026-73319 | XenForo up to 2.3.12 Dynamic Redirect cross site scripting

September 8, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in XenForo up to 2.3.12. Affected is an unknown function of the component Dynamic Redirect Handler. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-73319. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More