XenForo version 1.5.x with Advanced Application Forms version 1.2.2 suffers from an open redirection vulnerability.