A vulnerability was found in Xenforo up to 2.2.15 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection.

This vulnerability is handled as CVE-2024-38458. The attack needs to be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.