Bug Exploit?

[gamaken]

Saw on:
vBulletin Advanced User Tagging Mod - Stored XSS Vulnerability

Seems to me like it works. I had to remove the hash tag via the db in order to remove it. Could you take a look at this and advise? My members like this mod a lot.

 

[Fillip H.]

v3.0.5 is indeed vulnerable, that's why we released a security bulletin which we also emailed all users about

If you do not receive these emails, please check that you are subscribed to our mailing list and that you have not unsubscribed from Admin Emails via your UserCP.

 

[gamaken]

v3.0.5 is indeed vulnerable, that's why we released a security bulletin which we also emailed all users about

If you do not receive these emails, please check that you are subscribed to our mailing list and that you have not unsubscribed from Admin Emails via your UserCP.

Thanks for the quick reply. Patched and subscribed.