XF 1.4 Patch upgrade

[grantus]

I just got the notice about the XSS problem. I have Xenforo 1.4.5, so would I apply the 1.4.12 patch? https://xenforo.com/community/threads/xenforo-1-4-12-released-security-fix.109641/

 

[wang]

It would be best to do a full upgrade to the latest version in my opinion.

 

[Paul B]

I did a quick diff against the two versions and you should be OK to just replace the file but I would recommend upgrading to the latest version.

If you don't want to upgrade to the latest version then at the very least you should upgrade to 1.4.12.

 

[grantus]

I don't have an active license, so then I guess the only option is to replace that file with 1.4.12?

 

[wang]

Yes, that is correct.

 

[grantus]

Ok thanks.

 

[wang]

You are welcome sir.