MyBB 1.8.15 is now available, and is a security & maintenance release.
This update includes compatibility improvements for PostgreSQL and recent PHP versions as well as minor optimizations.
-
10 security vulnerabilities addressed:
- Medium risk: Tasks Local File Inclusion — reported by Riley Baird
- Medium risk: Forum Password Check Bypass — reported by Riley Baird
- Low risk: Admin Permissions Group Title XSS — reported by Nathaniel Suchy
- Low risk: Attachment types file extension XSS — reported by Nathaniel Suchy
- Low risk: Moderator Tools XSS — reported by Nathaniel Suchy
- Low risk: Security Questions XSS — reported by doylecc
- Low risk: Settings Management XSS — reported by Nathaniel Suchy
- Low risk: Templates Set Name XSS — reported by Nathaniel Suchy
- Low risk: Usergroup Promotions XSS — reported by Nathaniel Suchy
- Low risk: Warning Types XSS — reported by Nathaniel Suchy
- 24 issues resolved
Check Release Notes for a list of changes to language files, templates and unresolved issues.
Get latest MyBB Full & Upgrade Packages →
The MyBB Project extends thanks to reporters and researchers following responsible disclosure.
Go to mybb.com/security to report possible security concerns or to learn more about security research at MyBB.
If you would like to contribute to the Project, Get Involved.
Thanks,
MyBB Team
Hi,
After this update the video embed features are not working.Firstly, the YouTube embed feature is not working. Besides this, the dailymotion, vimeo, twitch embed features are not working. With updating has any adjustment been made for this?
Example Screenshot;
Please, will you give me information on this?
Upgraded no problems and thank you for the changes – my ACP issue is now resolved and v happy
youtube videos no longer show up on forum.
thanks