Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

website can be hacked?*

edited October 2011 in Vanilla 2.0 - 2.8
Hi,

One my forum user said this.
He said, cross site scripting or XSS is possible in my forum which is running the 2.0.18b2

Is that true?

Best Answer

  • UnderDogUnderDog MVP
    edited October 2011 Answer ✓
    Thank you for the question, I've sent you a PM.

    There was an error rendering this rich post.

Answers

  • UnderDogUnderDog MVP
    edited October 2011 Answer ✓
    Thank you for the question, I've sent you a PM.

    There was an error rendering this rich post.

  • x00x00 MVP
    edited October 2011
    You can report suspected vulnerabilities to git. Open source so can't hide anyway.

    grep is your friend.

  • LincLinc Detroit Admin
    edited October 2011
    We're not aware of any XSS attacks against Vanilla 2.0.18.

    If you (or someone else) believe you've found one, please report it to a staff member. We can all be reached at our forum name @vanillaforums.com (e.g. mine is lincoln@vanillaforums.com).
  • edited November 2011
    I was keep trying to contact him. There is no response so far. It must be false alarm.
    (I will just accept the first reply as the answer)

    If i get any details, I will PM or Mail you the details.
  • sounds like a skiddy,

    grep is your friend.

Sign In or Register to comment.