The Contrastive Vulnerability is an HTML/Javascript injection vulnerability that affects all versions of VaultWiki since 4.0.0 Beta 2 on XenForo only. vBulletin-based installations are not affected by this issue.
We have published the following Patch Level releases to resolve this issue:
- 4.0.10 Patch Level 1
- 4.0.9 Patch Level 1
- 4.0.8 Patch Level 3
- 4.0.7 Patch Level 4
- 4.0.6 Patch Level 7
- 4.0.5 Patch Level 7
- 4.0.4 Patch Level 7
We highly recommend that all users running any version of VaultWiki for XenForo in a production environment update to a patched release as soon as possible.
Oops!