MyBB 1.8.14 is now available, and is a security & maintenance release.
This update applies security patches and fixes minor issues related to the upgrade script included in the previous version.
2 security vulnerabilities addressed:
- High risk: Language file headers RCE — reported by Julian Rittweger
- Low risk: Language Pack Properties XSS — reported by Julian Rittweger
- 2 issues resolved
Check Release Notes for a list of changes to language files, templates and unresolved issues.
The MyBB Project extends thanks to reporters and researchers following responsible disclosure.
Go to mybb.com/security to report possible security concerns or to learn more about security research at MyBB.
If you would like to contribute to the Project, Get Involved.