We have recently become aware of a security issue within XenForo and have released a patch and new version (XenForo 1.3.9) to resolve this issue. We strongly recommend all XenForo customers follow the steps below to resolve this issue.
The issue was discovered by Miguel Ángel Jimeno...