• ALERT

    We are currently undergoing a minor database conversion which may have caused the email management system and registration and other minor issues, our team is working on getting our new database system up and running as soon as possible, thank you for your understanding!

    If you have any other questions, feel free to open a ticket on our discord server https://dc.gleaks.pro/

XenForo

xF Releases XenForo 2.2.11

Register to download this resource

Today, we are releasing XenForo 2.2.11 to address a potential security vulnerability. We recommend that all customers running XenForo 2.2 upgrade to 2.2.11 or use the attached patch file as soon as possible.

The issue relates to HTML attribute injection which can be triggered when rendering editor content, such as when a post is edited or quoted.

XenForo extends thanks to @PaulB, the team at @NamePros and @Xon for reporting the issues.

We recommend doing a full upgrade to resolve the issues, but a patch can be applied manually. See below for further details.

Note: There are no other changes in this release and any work previously done towards XenForo 2.2.11 - including a new CAPTCHA option by Cloudflare Turnstile and various bug fixes and improvements - will be released alongside XenForo 2.2.12 in the coming weeks.

Applying a patch manually​

If you are using XenForo 2.2.0 - 2.2.5​


Download the 220-225patch.zip file attached to this message. It will contain the following file:
  1. src/XF/BbCode/Renderer/EditorHtml.php
  2. src/XF/BbCode/Renderer/Html.php

If you are using XenForo 2.2.6 or above​


Download the 2211patch.zip file attached to this message. It will contain the following file:
  1. src/XF/BbCode/Renderer/EditorHtml.php
Extract the zip file to your computer and upload the contents to the root of your XenForo installation. This should overwrite the files on your server with the new version.

Note: If you decide to patch the files instead of doing a full upgrade, your "File health check" will report this file as having "Unexpected contents". Because these files no longer contain the same contents your version of XF was shipped with, this is expected and can be safely ignored.

As always, new releases of XenForo are free to download for all customers with active licenses, who may now grab the new version from the customer area or upgrade from your Admin control panel (Tools > Check for upgrades...).

Directly from your admin control panel

Installation and upgrade instructions​

Full details of how to install and upgrade XenForo can be found in the XenForo 2 Manual. We strongly recommend upgrading directly from within your control panel.

Uploader


Downloads
2
Views
135
First release
Last update
Rating
0.00 star(s) 0 ratings

More resources from ArteffKods

Similar resources

XenForo ArteffKods
XenForo 2.2.9 is now available for all licensed customers to download.
0.00 star(s) 0 ratings
Updated
XenForo ArteffKods
XenForo 2.2.10 is now available for all licensed customers to download.
0.00 star(s) 0 ratings
Updated
XenForo ArteffKods
XenForo 2.2.12 is now available for all licensed customers to download.
0.00 star(s) 0 ratings
Updated
XenForo 2.2.13 Released ArteffKods
In addition to the fixes listed below, we have a few other aces up our sleeves this time around.
0.00 star(s) 0 ratings
Updated
XenForo 2.2.14 Released Upgrade Nulled FULL ArteffKods
XenForo 2.2.14 Released Upgrade Nulled FULL
0.00 star(s) 0 ratings
Updated
XenForo 2.2.15 Released Upgrade Nulled FULL ArteffKods
  • Featured
XenForo 2.2.15 Released Upgrade Nulled FULL
0.00 star(s) 0 ratings
Updated
Back
Top Bottom