Update Feed

MyBB 1.8.22

3 January 2020

MyBB version 1.8.22 is now available (security release).

Upgrading to MyBB 1.8.22

MyBB 1.8.22 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply MyBB updates as new versions are released, or use Installatron's Clone feature to duplicate an existing MyBB install to test the 1.8.22 upgrade prior to applying it live. Get started managing your MyBB installations with Installatron

What's New in MyBB 1.8.22

MyBB 1.8.22 is a security & maintenance release.

Note: this version removes the discontinued Yahoo profile field, which may have been customized for other purposes.

Security

High risk: Installer RCE on settings file write
Medium risk: Arbitrary upload paths & Local File Inclusion RCE
Medium risk: XSS via insufficient HTML sanitization of Blog feed & Extend data
Low risk: Open redirect on login
Low risk: SCEditor reflected XSS

Bug Fixes

36 issues resolved

Templates Changed

codebuttons
forumdisplay_searchforum
header_quicksearch
member_profile_contact_details
member_referral_row
member_referrals
member_referrals_popup
memberlist_search
modcp_editprofile
moderation_inline_movethreads
portal_search
post_attachments
post_javascript
search
showthread
usercp_changename
usercp_profile_contact_fields