XF 1.5 User ID 0 posting on my forum?

[andrewkm]

I am getting quite a bit of spam lately.

Spam:

To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.

Accept third party cookies

Thread example:

To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.

Accept third party cookies

https://www.ecocitycraft.com/forum/threads/http-healthpluscogni-com-power-testo-blast.171251/

I cannot click the username as it appears as guest (the user was not deleted). For some reason I have some users posting with the User ID 0.

When I look in the database for the above thread I see this:

To view this content we will need your consent to set third party cookies.
For more detailed information, see our cookies page.

Accept third party cookies

I can't seem to wrap my head around how this is possible, I've checked all my permissions and guests should not be able to post in any way.

Is there some sort of Xenforo exploit going around allowing this?

I am using the latest version of xenforo 1.5.15​

 

[Paul B]

I have just replied to your ticket.

Please don't create tickets and post on the forum simultaneously - it just results in duplication of effort.