Description Xenforo before 2.2.16 allows code injection. References https://xenforo.com/community/threads/xenforo-2-1-15-patch-1-2-2-16-patch-2-and-xenforo-media-gallery-2-1-9-2-2-6-released-includes-security-fixes.222133/ 20240716 [KIS-2024-06] XenForo <= 2.2.15 (Template System) Remote Code Execution Vulnerability mailing-list