This Thread had not been rated yet
XenForo 2.1.10 Patch 2 Released (Includes Security Fix)
Release version: 2.1 | Release type: FULL
XenForo 2.1.10 is now available for all licensed customers to download. We recommend that all customers running previous versions of XenForo 2.1 upgrade to this release to benefit from increased stability.
Most importantly, this release fixes a security vulnerability in XenForo.
The issue is a XSS vulnerability. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access. The vulnerability requires some very specific steps to be taken, involving pasting malicious content into the XenForo rich text editor, which may mean it is difficult to trigger. XenForo extends thanks to @TickTackk for reporting the issue.
Changelog: https://xenforo.com/community/threads/xe...ix.180901/
Download
Unlocked content
Upgrade your account to always see hidden content or reply in thread to view hidden content.
This Thread had not been rated yet
