MyBB 1.8.15 is now available, and is a security & maintenance release.

This update includes compatibility improvements for PostgreSQL and recent PHP versions as well as minor optimizations.

• 10 security vulnerabilities addressed:
  • Medium risk: Tasks Local File Inclusion — reported by Riley Baird
  • Medium risk: Forum Password Check Bypass — reported by Riley Baird
  • Low risk: Admin Permissions Group Title XSS — reported by Nathaniel Suchy
  • Low risk: Attachment types file extension XSS — reported by Nathaniel Suchy
  • Low risk: Moderator Tools XSS — reported by Nathaniel Suchy
  • Low risk: Security Questions XSS — reported by doylecc
  • Low risk: Settings Management XSS — reported by Nathaniel Suchy
  • Low risk: Templates Set Name XSS — reported by Nathaniel Suchy
  • Low risk: Usergroup Promotions XSS — reported by Nathaniel Suchy
  • Low risk: Warning Types XSS — reported by Nathaniel Suchy
• 24 issues resolved

Check Release Notes for a list of changes to language files, templates and unresolved issues.

Get latest MyBB Full & Upgrade Packages →

The MyBB Project extends thanks to reporters and researchers following responsible disclosure.
Go to mybb.com/security to report possible security concerns or to learn more about security research at MyBB.
If you would like to contribute to the Project, Get Involved.

Thanks,
MyBB Team