XenForo 2.2.11 Released (Security Fix)

Releases XenForo 2.2.11 Released (Security Fix) 2.2.11 Security Patch

Register & Get access to index
Status
Not open for further replies.

XenForo

Administrative
  • Thread starter
  • Admin
  • #1
XenForo submitted a new resource:

XenForo 2.2.11 Released (Security Fix) - XenForo Releases

https://add.pics/images/2022/10/08/Untitled.png


Today, we are releasing XenForo 2.2.11 to address a potential security vulnerability. We recommend that all customers running XenForo 2.2 upgrade to 2.2.11 or use the attached patch file as soon as possible.

The issue relates to HTML attribute injection which can be triggered when rendering editor content, such as when a post is edited or quoted.

XenForo extends thanks to...

Read more about this resource...
 

XenForo

Administrative
  • Thread starter
  • Admin
  • #2

Applying a patch manually​

If you are using XenForo 2.2.0 - 2.2.5​


Download the 220-225patch.zip file attached to this message. It will contain the following file:

  1. src/XF/BbCode/Renderer/EditorHtml.php
  2. src/XF/BbCode/Renderer/Html.php

If you are using XenForo 2.2.6 or above​


Download the 2211patch.zip file attached to this message. It will contain the following file:

  1. src/XF/BbCode/Renderer/EditorHtml.php
Extract the zip file to your computer and upload the contents to the root of your XenForo installation. This should overwrite the files on your server with the new version.

Note: If you decide to patch the files instead of doing a full upgrade, your "File health check" will report this file as having "Unexpected contents". Because these files no longer contain the same contents your version of XF was shipped with, this is expected and can be safely ignored.

There is now an alternative manual patch available for customers using versions 2.2.0 - 2.2.5.
 

Attachments

  • XnForo.ir - 220-225patch.zip
    14.7 KB · Views: 4
Status
Not open for further replies.
  • Tags
    downlod xenforo 2.2.11 released xenforo 2.2.11 released xenforo 2.2.11 released (security fix) 2.2.11 security patch xenforo 2.2.11 released download xenforo 2.2.11 released free xenforo 2.2.11 released nulled
  • Back
    Top Bottom