[Forum] XSS Cross site scripting pls help

[samii]

When I go into my search.php and when i searched for this <script>alert('XSS Hackable!')</script>

the search results shows my forum is hackable, Can anyone please help on how to fix this?

I am on version 4.0.5

[Trevor Hannant]

Upgrade your site - this doesnt happen on my 4.0.7 site or on here (running 4.0.8).

[Micronichos]

Upgrade your site - this doesnt happen on my 4.0.7 site or on here (running 4.0.8).

Why don't you alert about security issues? some people are not interested in upgrade and I think this is a very bad security policy.

[Shamil.]

Why don't you alert about security issues? some people are not interested in upgrade and I think this is a very bad security policy.

The first procedure in any event is to make sure that you are running the latest software version. It is then likely, that the fix was included in a later release.

[Removed-836727]

Deactivate your plugin system and try it again.
The most Problems comes from semiprofessional add-ons

[nakedanvil]

Why don't you alert about security issues? some people are not interested in upgrade and I think this is a very bad security policy.

They could probably find out what versions you've downloaded, but they would have no way to determine what version you're running on your site. One reason for upgrades is security fixes. It's your choice whether or not to use the latest and most secure version of any software you're using.

[Zachery]

Why don't you alert about security issues? some people are not interested in upgrade and I think this is a very bad security policy.

We always push security updates and notices out to as many places as possible.

It is also possible no one reported the issue, and it was fixed unintentionally during bug fixes.

[Micronichos]

We always push security updates and notices out to as many places as possible.

It is also possible no one reported the issue, and it was fixed unintentionally during bug fixes.

Thanks Zachery.