Guest XenForo Posted October 11, 2022 Posted October 11, 2022 Today, we are releasing XenForo 2.1.13 to address a potential security vulnerability. We recommend that all customers still running XenForo 2.1 upgrade to 2.1.13 or use the attached patch file as soon as possible. The issue relates to HTML attribute injection which can be triggered when rendering editor content, such as when a post is edited or quoted. XenForo extends thanks to security researcher [uSER=56853]@PaulB[/uSER], the team at [uSER=64727]@NamePros[/uSER] and [uSER=71874]@Xon[/uSER] for reporting the issues. We... Read more Continue reading... Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.