If you are running vBPlaza, and have clicked Install, you will have received the following email:
Quote:
Official Security Exploit Warning:
The staff has been notified of a potential XSS vulnerability in the vbBux / vbPlaza modification. We have confirmed the exploit along with additional exploits in varying degrees. This notification is to serve as an official warning - it is HIGHLY recommended that you disable/uninstall the modification until a fix is provided.
To review protocol for modifications with confirmed exploits found please visit: Mod Vulnerability Guidelines - vBulletin.org Forum
Best Regards, vBulletin.org Staff
|
I recommend all users of vBPlaza to disable the modification through
vBulletin Options - vBPlaza Options, as well as Disabling it through the Product Manager, just to be safe.
I will update this when the fix is posted.