XenForo 2.1.10 Patch 2 Released Full / Upgrade (Includes Security Fix)

XF2 RELEASED XenForo 2.1.10 Patch 2 Released Full / Upgrade (Includes Security Fix) 2.1.10-Patch2

XenForo 2.1.10 Patch 2 Released Full / Upgrade (Includes Security Fix)
XenForo 2.1.10 is now available for all licensed customers to download. We recommend that all customers running previous versions of XenForo 2.1 upgrade to this release to benefit from increased stability.

Most importantly, this release fixes a security vulnerability in XenForo.

The issue is a XSS vulnerability. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access. The vulnerability requires some very specific steps to be taken, involving pasting malicious content into the XenForo rich text editor, which may mean it is difficult to trigger. XenForo extends thanks to @TickTackk for reporting the issue.
  • Like
Reactions: Paulo
Top