XenForo 2.2.18 has also been released. Please refer to the release notes above. Only two of the three security issues apply to XenForo 2.2.18. The stored XSS is not applicable.
We recommend doing a full upgrade to resolve the issue, but a patch can be applied manually. See below for further details.
We recommend doing a full upgrade to resolve the issue, but a patch can be applied manually. See below for further details.
- Download 2218-patch.zip
- Extract the .zip file
- Upload the contents of the upload directory to the root of your XenForo installation