XSS в Адванседе

[qaqaqa]

Yesterday a potential cross-site-scripting (XSS) exploit was reported that affects vBadvanced CMPS v3.0+ and v4.0 Beta. vBadvanced CMPS v3.2.2 (vB 3.6 - 3.8) and v4.0.0 RC1 (vB 4.0+) have been released to correct this potential threat, so it is highly recommended that anyone running vBadvanced CMPS upgrade to the appropriate version as soon as possible. The steps to upgrade are the same as usual and full upgrade instructions may be found in the readme.html file that comes with the download package.

We are also happy to announce the release of vBa CMPS v4.0.0 RC1. This new release takes v4.0 out of it's beta stages and brings the product to a level of stability where it may be run on live web sites. There will likely be some minor bugs still, but all known bugs & issues have been corrected. In addition to bug fixes, new settings when adding/editing pages have been added to allow you to display a link to the page in your navbar tabs, along with a setting to allow you to display that pages child pages below in a sub-menu.
Thanks to those who helped to test the beta versions. Your feedback and bug reports have been a huge help in getting to this stage!


Yours,
The vBadvanced Team


If you would like to unsubscribe from our mailing list, please login to your account via the link below to update your settings.
http://www.vbadvanced.com/forum/prof...do=editoptions

[Skald]

qaqaqa, Да... Было бы классно если они написали где именно XSS :)))

[qaqaqa]

Skald, да фиг с ним, где оно было. Обновление выпустили и ладно.
Рано или поздно узнаем, где дыра.

[MiraMaX166]

Так уже есть 3.2.2, там дыру залатали вроде.
Я поставил, полёт нормальный...