XenForo Releases
XenForo 2.0.9 - (Security Fix) - Full & Upgrade - Nulled By NulledTeam
Submitted by DeCarvalho, 26-07-2018, 11:28 PM, Thread ID: 96688
Thread Closed
//PLEASE DM ME IF THE LINK APPEAR TO BE DOWN - I'LL RE-UPLOAD
No, you're not imagining it - wearedoing another release, just a day after therelease of 2.0.8.
XenForo 2.0.9 fixes a flaw that could potentially be exploited to create a cross-site scripting vulnerability. We recommend that all customers running XenForo 2.0 upgrade to 2.0.9 or use the attached patch file as soon as possible. Note that if you are applying the patch rather than doing a full upgrade to 2.0.9, you will need to applythe 2.0.8 patchtoo.
XenForo extends thanks to Thomas Schneider for identifying the issue.
The issue is a XSS vulnerability. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access.
Applying a Fix: Upgrading
You may upgrade to 2.0.9 to fix this issue. You should upgrade as you would to any other release.
Customers with an active license may download 2.0.9 from theircustomer area. Full details for how toinstallandupgradeXenForo can be found in theXenForo Manual.
[spoiler="Full"]
[/spoiler]
[spoiler="Upgrade"]
[/spoiler]
![[Image: xf1-jpg.75]](https://nulledbb.com/c/cffb8bfbdde24ce24dd9617d807de64078a03365/687474703a2f2f636c6f75646c65616b732e6e65742f6174746163686d656e74732f7866312d6a70672e37352f/)
![[Image: xf2-jpg.76]](https://nulledbb.com/c/8c23751245155d163f4f7fe025bca68388d9093e/687474703a2f2f636c6f75646c65616b732e6e65742f6174746163686d656e74732f7866322d6a70672e37362f/)
![[Image: xf3-jpg.77]](https://nulledbb.com/c/db1f902e5b2f4b85fa298620d1b1f8cdbd1ed2c1/687474703a2f2f636c6f75646c65616b732e6e65742f6174746163686d656e74732f7866332d6a70672e37372f/)
![[Image: xf4-jpg.78]](https://nulledbb.com/c/f30548ec7c11a2d25cd35b8baeadf427eebffd35/687474703a2f2f636c6f75646c65616b732e6e65742f6174746163686d656e74732f7866342d6a70672e37382f/)
No, you're not imagining it - wearedoing another release, just a day after therelease of 2.0.8.
XenForo 2.0.9 fixes a flaw that could potentially be exploited to create a cross-site scripting vulnerability. We recommend that all customers running XenForo 2.0 upgrade to 2.0.9 or use the attached patch file as soon as possible. Note that if you are applying the patch rather than doing a full upgrade to 2.0.9, you will need to applythe 2.0.8 patchtoo.
XenForo extends thanks to Thomas Schneider for identifying the issue.
The issue is a XSS vulnerability. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access.
Applying a Fix: Upgrading
You may upgrade to 2.0.9 to fix this issue. You should upgrade as you would to any other release.
Customers with an active license may download 2.0.9 from theircustomer area. Full details for how toinstallandupgradeXenForo can be found in theXenForo Manual.
[spoiler="Full"]
[/spoiler]
[spoiler="Upgrade"]
[/spoiler]
Users browsing this thread: 1 Guest(s)