This morning James Bercegay from GulfTech Security Research made us aware of a potential security issue with one of the scripts within any version of UBB.threads that is 7.0 or greater. We have since addressed this issue and have made this fix available in the Members Area.

It's a quick fix, just replacing this one file in your install. You'll find a zip related to your version 7.0.x, 7.1.x, 7.2.x or 7.3.x. Download the zip and extract it. Read the README file within and follow the instructions.

Version 7.3.1 in the Members Area has been patched up, so if you're downloading after this post has been posted, you do not need to download the patch file.

If you do not have current access to the Members Area, you can request the patch by filling out a basic support ticket here. Make sure to note what version you are currently running so we can send you the proper patch file.

If you'd like to discuss this announcement, you can do so in this topic.