Have you seen...?

XenForo 2.3.9 Released Today we are releasing XenForo 2.3.9 to address some potential security vulnerabilities that were recently reported to us. This version only includes security fixes and any bug fixes we previously said would make it to 2.3.9 have now been delayed until 2.3.10. It is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.3 upgrade to this release to benefit from increased stability. The issues identified are as follows: Prevention of a possible stored XSS (cross-site scripting) exploit related to BB code rendering (thank you to Antisocial) Prevention of a possible XSS exploit related to lightbox usage in posts (thank you UwU)...

XenForo 2.3.7 Released XenForo 2.3.7 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.3 upgrade to this release to benefit from increased stability. In addition to the usual fixes and improvements, XenForo 2.3.7 also includes a critical security fix to ensure the security of Passkeys that have been added to your account. We'd very much like to thank Jai Niresh J for reporting this issue via Eric and team at Hypixel Inc.. Between them they also reported a less severe issue related to local account page caching on shared systems. This version also tightens up the kinds of methods that can be called from within templates, evolving from a loose...

Flash Message Improvements In the coming weeks, we will be showcasing a few improvements very kindly donated to us by XenForo development G.O.A.T, @digitalpoint! When digitalpoint heard that the primary aim for XenForo 2.4 was to implement some tangible quality of life improvements, he was very quick to offer up some code he has written over the years - some released, some not - which he wrote for his own sites. Is there a somewhat ulterior motive to this code philanthropy aside from our eternal gratitude and ongoing respect? Yes. Now he no longer has to maintain any of this code himself! No better motive required, in our opinion, and of course it still comes with our eternal gratitude and respect. It's 2025 so I hate the term "flash...