XenForo 2.0.11 Full Released - Best Paid

01-12-2018, 05:22 PM

ilovenibbas Wrote: Yes this is the latest version of XenForo. You can see the latest changelog of XenForo in the changelogs.


EDIT: This isnt the latest version, its 2.0.10, waste of Credits.

I just checked the file and it`s as was described by the author! It`s the latest stable version as XenForo Official post said:

Quote:Today, we are releasing XenForo 2.0.11 to address a potential security vulnerability. We recommend that all customers running XenForo 2.0 upgrade to 2.0.11 or use the attached patch file as soon as possible.


The issue is a XSS vulnerability. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access.

Specifically, the issue relates to specially crafted text entered into messages and output using the structured text system (used in profile posts and comments).

There are no other fixes included in this version. There will be a further maintenance release in the coming weeks.

Applying a Fix: Upgrading
You may upgrade to 2.0.11 to fix this issue. You should upgrade as you would to any other release.

Customers with an active license may download 2.0.11 from theircustomer area. Full details for how toinstallandupgradeXenForo can be found in theXenForo Manual.

Applying a Fix: Patching
Alternatively, this issue can be fixed by applying the patch in the attached file. You should simply overwrite the following file with the version attached to this message: