Releases XenForo 2.1.13 & 2.1.14 Released (Security Fix) 2.1.14 Security Patch

[XenForo]

XenForo submitted a new resource:

XenForo 2.2.11 Released (Security Fix) - XenForo Releases

Today, we are releasing XenForo 2.2.11 to address a potential security vulnerability. We recommend that all customers running XenForo 2.2 upgrade to 2.2.11 or use the attached patch file as soon as possible.

The issue relates to HTML attribute injection which can be triggered when rendering editor content, such as when a post is edited or quoted.

XenForo extends thanks to...

Read more about this resource...

 

[XenForo]

XenForo updated XenForo 2.2.11 Released (Security Fix) with a new update entry:

2.1.13 (Security Fix)

Applying a patch manually​

Download the 2113patch.zip file attached to this message. It will contain the following file:

1. src/XF/BbCode/Renderer/EditorHtml.php

Extract the zip file to your computer and upload the contents to the root of your XenForo installation. This should overwrite the files on your server with the new version.

Note: If you decide to patch the files instead of doing a full upgrade, your "File health check" will report this...

Read the rest of this update entry...

 

[XenForo]

XenForo updated XenForo Released (Security Fix) with a new update entry:

2.2.14 Security Patch

• If you have already downloaded XenForo 2.1.13 this will have introduced an issue whereby the [COLOR] tag will no longer work as expected when switching to/from the BB code editor.

• We have updated the existing download to include a fix for this and updated the manual patch in the original post.

Read the rest of this update entry...