Shortly after announcing their vBulletin 3.6.8 Patch Level 1 to fix a security issue found mid October, vBulletin has released yet another security patch for a similar issue.

This release is a patch to 3.6.8 to fix a security issue reported to vBulletin within the WYSIWYG editor for Firefox. Only 3.6.8 is affected by this issue. The only changes in this release are for this security issue, fixes for 3.6.8 Patch Level 1 are also included with the patch.

The changed files are:
includes/functions_editor.php
includes/class_bbcode.php (This is part of the Patch Level 1 fix)
includes/version_vbulletin.php
There are no template changes.

If you are currently running the original release of vBulletin 3.6.8, you will want to apply this simple patch to fix the potential security issues.

Popularity: 42% [?]