Announcements

Today, we are releasing XenForo 2.0.8 to address a potential security vulnerability. We recommend that all customers running XenForo 2.0 upgrade to 2.0.8 or use the attached patch file as soon as possible.The issue is a XSS vulnerability. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access.Specifically, the issue relates to specially crafted text entered into messages and output using the structured text system (used in profile posts and comments).Thank you to @batpool52! for identifying the issue and reporting it to us.There are no other fixes included in this version. There will be a further maintenance release in the coming...

Hot on the heels of our previous GDPR centric releases, today we're pleased to announce the release of XenForo 1.5.21 and XenForo 2.0.7 which aims to resolve some issues found since the release of the previous versions, and include a few further tweaks to enhance GDPR compliance on your forum.See our previous release announcement for details of how we can help you comply with the new GDPR regulations.A summary of the changes in this release are as follows:Ensure the server side validates the privacy policy/terms and rules acceptance form (XF1 and XF2) Ensure certain fields output in the data portability exports are escaped (XF1 and XF2) Some small phrase adjustments (XF1 and XF2) Attempt to ensure the new cookie notice does not...

Slightly ahead of schedule, we are today releasing stable versions of both XenForo 1.5.20 and XenForo 2.0.6 which implement some new functionality to aid compliance with the GDPR.For a much more detailed overview of what GDPR is and what new features have been added, please read the following thread Upcoming changes for GDPR compliance in XF1 and XF2.A summary of the changes in this release for both XF1 and XF2:New notice position "Fixed" which fixes notices to the bottom of the page. GDPR: New default privacy policy help page GDPR: Ability to mark change log entries as "protected" so they will never be pruned GDPR: New fields to log the date and time that the privacy policy / terms and rules were last accepted (logged as...

Today we are releasing both XenForo 1.5.20 Beta 2 and XenForo 2.0.6 Beta 2 which resolves a small number of issues that have been reported to us since the release of Beta 1 which introduced some new functionality to aid compliance with the GDPR.For a much more detailed overview of what GDPR is and what new features have been added, please read the following thread Upcoming changes for GDPR compliance in XF1 and XF2.This is beta software. It is not officially supported. We do not recommend running it in production.For details of the bugs fixed in this release, view the Resolved bugs forum.A summary of the changes in this release for both XF1 and XF2:New notice position "Fixed" which fixes notices to the bottom of the page...

As promised, we are today releasing both XenForo 1.5.20 Beta 1 and XenForo 2.0.6 Beta 1 which implements some new functionality to aid compliance with the GDPR.For a much more detailed overview of what GDPR is and what new features have been added, please read the following thread Upcoming changes for GDPR compliance in XF1 and XF2.This is beta software. It is not officially supported. We do not recommend running it in production.A summary of the changes in this release for both XF1 and XF2:New notice position "Fixed" which fixes notices to the bottom of the page. GDPR: New default privacy policy help page GDPR: Ability to mark change log entries as "protected" so they will never be pruned GDPR: New fields to log the date and...

XenForo 2.0.5 is now available for all licensed customers to download. We recommend that all customers running previous versions of XenForo 2.0 upgrade to this release to benefit from increased stability.In addition to the usual bug fixes and improvements, we have also included a new file to overwrite the potentially exploitable SWFUpload library that you may still have on your file system if you upgraded from XF 1.x. To clean up any old XF1 files, we recommend using the XF1 Cleanup Command.Download XenForo 2.0.5Some of the changes in 2.0.5 include:Allow oEmbed loaded embeds to be aligned left, right or center depending on on the text alignment of the content. Small phrase adjustments. Update LiveLeak site matching and URLs. Fix...

Today, we have released XenForo Media Gallery 2.0.4, a maintenance release for our gallery add-on. This release primarily targets bug fixes and other small improvements.Some of the changes include:Ensure hourly and daily clean up crons are running at the correct time. Fix part of the Setup when upgrading from very old versions to version 2. Fix an issue which meant that embed thumbnails were not rebuilt. Make it clearer when adding media where you are adding media to. Do not display option to send alert when performing certain actions on only your own media/albums/comments. Display the correct album owner stats when viewing an album. Add missing "move album" alert template. Fix display of certain structured data for media items. Fix...