Security vulnerability: Flagging plugin (2.0.18.2 and earlier)

Lincoln

There is an XSS vulnerability in Vanilla, version 2.0.18.2 and earlier. This only effects the Flagging plugin. Anyone using the Flagging plugin should immediately upgrade to 2.0.18.3 or make this change: Fix for Flagging XSS.

2.0.18.3 is now available.

x00

thanks so much for letting us know, forwarded to others I know use this.

EarthLaunch

Awesome to know, thank you.

Gillingham

Was this the only change in 2.0.18.3?

Lincoln

Yes.

michaelchower

that's great. thank!