mybb MyBB 1.8.18 Released — Security & Maintenance Release

[Guest Devilshakerz]

MyBB 1.8.18 is now available, and is a security & maintenance release.

 

Changes include added support for Mixer videos and multi-file attachments, modified Word Filter behavior, fixes to the mailing queue and improved compatibility with SQLite and MySQL 8. Theme CSS changes may be required and administrators may need to review Word Filters.

 

• 2 security vulnerabilities addressed:
   
  
  • High risk: Image MyCode “alt” attribute persistent XSS — reported by Punisher_HF
    
  • Medium risk: RSS Atom 1.0 item title persistent XSS — reported by 0xB9
    

• 30 issues resolved

 

Check Release Notes for a list of changes to language files, templates and unresolved issues.

 

Get latest MyBB Full & Upgrade Packages →

 

The MyBB Project extends thanks to reporters and researchers following responsible disclosure.

Go to mybb.com/security to report possible security concerns or to learn more about security research at MyBB.

If you would like to contribute to the Project, Get Involved.

 

Thanks,

MyBB Team

 

Continue reading...