MyBB 1.6.18 was released on 7 September 2015.
MyBB 1.6.18 is a security release and fixes 1 medium and 3 low risk vulnerabilities.
- Vulnerabilities fixed:
- Medium Risk: Forum password bypass in xmlhttp.php
- Low Risk: SQL Injection in Grouppromotions module (ACP)
- Low Risk: Possible XSS Injection in the error handler
- Low Risk: Possible XSS issues in old upgrade files
The following files have changed since MyBB 1.6.17.
There are no changes to language files.
There are no changes to templates.