vBulletin News: New Security Patches released for vBulletin

[oldengine]

"Issue one is a potential Cross Site Scripting exploit, Issue two could allow routes to be forged on vBulletin pages."

Although this patch appears to be for vBulletin 5.1.4 - 5.1.9, it appears to imply that patches are available for earlier versions.

"If you're using a version of vBulletin 5 older than 5.1.4, you should upgrade to the latest version as soon as possible."

Does this in fact affect version 3.8.9 Beta 2?

This is the latest one that they list: Security patch: 3.8.8 PL1.

[glennrocksvb]

"If you're using a version of vBulletin 5 older than 5.1.4, you should upgrade to the latest version as soon as possible."

This means 5.0 to 5.1.3. If you are using any of those versions, you should upgrade to 5.1.9 PL3 asap.

[Paul M]

Does this in fact affect version [B]3.8.9 Beta 2?

It pretty clearly states vBulletin 5

"If you're using a version of vBulletin 5 older than 5.1.4, you should upgrade to the latest version as soon as possible."

So no, not vBulletin 4 or vBulletin 3.