Christoph Feddersen

• Read announcement for 3.x product line
• Read announcement for 3.5.x product line

A recently discovered cross-site scripting (XSS) flaw in all three branches of vBulletin has prompted us to perform a security update, releasing new versions of vBulletin 2, 3.0.x and 3.5.x simultaneously.

All prior versions of vBulletin are vulnerable and we advise customers to upgrade or patch their vBulletin installations at their earliest convenience.

• Read the full announcement for vBulletin 3.x
• Read the full announcement for vBulletin 3.5.x

The vBulletin team announced to security releases to fix a cross site scripting (XSS) vulnerability.

• vbulletin 3.x product line announcement
• vBulletin 3.5.x product line announcement

All customers should immediately upgrade their boards.

Read the release announcement.

Another minor release which fixes some annoying bugs aswell a possible vulnerability.

Details here.