[tc4me]

MyBB 1.8.26 has been released and is now available for download. This is a security update that closes one high risk, four medium and one low risk vulnerabilities.

We recommend everyone to update their forum as soon as possible!

What's new / changed?
6 security holes have been closed.

Closed security holes:
High risk: XSS vulnerability automatically recognized URLs
Medium risk: SQL injection for theme properties
Medium risk: SQL injection for surveys
Medium risk: SQL injection in forum administration
Medium risk: SQL injection for user groups
Low risk: XSS vulnerability in own moderation tools

MyBB

[Darth-Apple]

Thank you for the report, @tc4me. You caught this before I did. We are updating as we speak and will be back very shortly!

Edit: Updates completed. MS and SM are both fully patched.

[tc4me]

Perfect! With pleasure, I always think it's great that despite freeware, the developers find fast and good solutions for security