XenForo 2.2.19 has also been released. Please refer to the release notes above.
We recommend doing a full upgrade to resolve the issue, but a patch can be applied manually. See below for further details.
Download 2219-patch.zip
Extract the .zip file
Upload the contents of the upload directory to the root of your XenForo installation
Note: If you decide to patch the files instead of doing full upgrades, your "File health check" will report these files as having "Unexpected contents". Because these files no longer contain the same contents your version of XF was shipped with, this is expected and can be safely ignored.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
XenForo Announcements
ข่าวสารจาก [www.xenforo.com]
XenForo 2.3.10 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.3 upgrade to this release to benefit from increased stability.
In addition to the usual bug fixes, XenForo 2.3.10 includes a critical security fix involving a potential stored XSS vector in structured text mentions (mostly legacy profile post content). We'd like to extend thanks to metho for responsibly disclosing the issue.
If you are a XenForo Cloud customer running 2.3.8, the security fix has already been applied and no immediate action is required. XenForo 2.3.10 will be made available to you shortly.
We recommend doing a full upgrade to resolve the issue, but a patch can be...
Today we are releasing XenForo 2.3.9 to address some potential security vulnerabilities that were recently reported to us. This version only includes security fixes and any bug fixes we previously said would make it to 2.3.9 have now been delayed until 2.3.10.
It is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.3 upgrade to this release to benefit from increased stability.
The issues identified are as follows:
Prevention of a possible stored XSS (cross-site scripting) exploit related to BB code rendering (thank you to Antisocial)
Prevention of a possible XSS exploit related to lightbox usage in posts (thank you UwU)
Prevention of a possible RCE...
XenForo 2.2.18 has also been released. Please refer to the release notes above. Only two of the three security issues apply to XenForo 2.2.18. The stored XSS is not applicable.
We recommend doing a full upgrade to resolve the issue, but a patch can be applied manually. See below for further details.
Download 2218-patch.zip
Extract the .zip file
Upload the contents of the upload directory to the root of your XenForo installation
Note: If you decide to patch the files instead of doing full upgrades, your "File health check" will report these files as having "Unexpected contents". Because these files no longer contain the same contents your version of XF was shipped with, this is expected and can be safely ignored.
XenForo Media Gallery 2.3.8 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo Media Gallery 2.3 upgrade to this release to benefit from increased stability.
One-click upgrade to XenForo Media Gallery 2.3.8
Directly from your admin control panel
If you are a XenForo Cloud customer, your upgrade will be scheduled automatically.
Some of the changes in XFMG 2.3.8 include:
Prevent a race condition related to soft-deleting media items
Use YouTube oEmbed API to fetch video title and description
Embed media permission fails for new personal albums
The following public templates have had changes:
xfmg_media_embed_media
xfmg_media_lightbox_view...
XenForo Enhanced Search 2.3.8 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo Enhanced Search 2.3 upgrade to this release to benefit from increased stability.
One-click upgrade to XenForo Enhanced Search 2.3.8
Directly from your admin control panel
If you are a XenForo Cloud customer, your upgrade will be scheduled automatically.
Some of the changes in XFES 2.3.8 include:
Make it easier to access raw ElasticSearch response
XenForo Enhanced Search requires XenForo 2.3 or later.
Purchasing
XenForo Enhanced Search can be purchased with a new license via the purchase page or with an existing license via the customer area.
Installation, upgrading...
XenForo Resource Manager 2.3.8 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo Resource Manager 2.3 upgrade to this release to benefit from increased stability.
One-click upgrade to XenForo Resource Manager 2.3.8
Directly from your admin control panel
If you are a XenForo Cloud customer, your upgrade will be scheduled automatically.
XenForo Resource Manager requires XenForo 2.3 or later.
Purchasing
XenForo Resource Manager can be purchased with a new license via the purchase page or with an existing license via the customer area.
Installation, upgrading and configuration
Please see our XenForo Resource Manager manual page for more information.
Legal Notice
กรุณาปิด โปรแกรมบล๊อกโฆษณา เพราะเราอยู่ได้ด้วยโฆษณาที่ท่านเห็น.
Please close the adblock program. Because we can live with the ads you see.
Please close the adblock program. Because we can live with the ads you see.