The release of VaultWiki 4 Alpha 4 has been accelerated and made available today to address this issue. We highly recommend that any customers who are using an earlier Alpha of VaultWiki 4 to upgrade as soon as they are able to close this security hole. The issue does not exist in VaultWiki 3.
Please note that Alpha 4, like those before it, is only compatible with vBulletin 4.1.4 and higher.
Changes
In this Alpha, you'll notice:- Resolved XSS vulnerability
- Forum headers are back
- More reliable caches
- Deleting wiki pages works properly
- Discussion titles are fixed
- Other minor enhancements and bug fixes
Since this is still an Alpha release, we still do not recommend installing VaultWiki 4 Alpha 4 on production sites at this time.