MyBB 1.8.32

SecurityMaintenance

code 1832

Full Package

Install a new MyBB forum or upgrade from older versions.

.zip – 2.2 MB

Download from MyBB.com Download from GitHub.com (mirror)

sha512:

e143e67eebb8653428c89f5afb000a97545317da0bbfd9c362bd92341635a0542d41f32c8ef25e9d9cefcc4a779973bae2ca3fe13268858b243ada24af712200

More checksums…

sha256:

681ead02fdc2bdfbd526d7d94360e28c2595275f622211ee26bdc0aa9bf3f9bd

sha1:

de542143451b12e016b389f8ad19caec05506507

md5:

5091549d5c76e96c54499f680d973c9c

Changed Files

Upgrade from the previous version.

.zip – 0.48 MB

Download from MyBB.com Download from GitHub.com (mirror)

sha512:

3c75c19b85a9a27e8e11fcc779c407dff5ee00f0c9bda909199f69d2597cf6378c5e9c0559d4ea30e30cfba68d0b7b234ed821e11e7d066122b8d85f81d5b17c

More checksums…

sha256:

e0a6c0389aaf6078d5d9fbf00b4ae37f8d99a5bb3c2b3e9471381ddfec810cbb

sha1:

8b46066a77361616f5f8e442169eb8ee48d1db4f

md5:

82362467cb7c5bf71f21ca26cf0d4a69

How to verify packages

Upgrading to this Version

To upgrade: copy and overwrite the files, and run the install/ upgrade script.

Before performing any upgrade, remember to backup your forum’s files and database and store them safely.

If you have edited core files, including language files, please make sure you make a changelog for these changes so you can make them again (if necessary) once the upgrade is complete.

Follow the Upgrade Documentation for more detailed instructions.

Security Vulnerabilities Addressed (3)

High risk

Visual editor persistent XSS [1]

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-43707 Reported by Aleksey Solovev Positive Technologies

Medium risk

ACP Users SQL injection [1]

CWE-89 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-43709 Reported by Aleksey Solovev Positive Technologies

Low risk

Attachment upload XSS [1]

CWE-79 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-43708 Reported by Aleksey Solovev Positive Technologies

Issues Resolved (1)

View issues on GitHub

Changed Files ()

Changed Templates (2)

  • codebuttons
  • post_javascript