Forum Plugin Version 2.7.2 - Security Fix
- Sunday, January 25 2009 @ 12:57 pm EST
- Contributed by: Blaine
- Views: 5,985
An issue that can allow someone to edit another users recently posted topic has been identified by Matthew Demicco. This is possible during the edit timeframe which by default is 1 min and requires someone to modify the URL.
This new release addresses that issue and all sites are recommended to upgrade to this latest release which is now available in the downloads area.
The upgrade steps are to replace the changed files and run the plugin upgrade.
- public_html/createtopic.php
- config.php
- functions.inc