No licensed User....but I have to say something in private

[mollinghuber]

I'm a co-worker on a vbulletin-based community, but not a owner of a license, so I cannot use the ticket-system.
I think I stumbled across a critical XSS-issue inside the CMS.
We currently use vbulletin 4.0.6

To eliminate external Products as reason I checked the issue inside the vbulletin-demo, it also exist's there.

Is there any employee who want's to hear about it?, I think it's no good idea to post it inside the forum

greets mollinghuber

[Zachery]

You can send an email directly to [email protected]

[mollinghuber]

Thank's, I will do this

[Zachery]

Thank you

[scylla22]

or you can always visit the tracker at tracker.vbulletin.com and choose to not make this public (that is if non registered users can even use it..)

[rmwebs]

or you can always visit the tracker at tracker.vbulletin.com and choose to not make this public (that is if non registered users can even use it..)

It could take weeks/months for it to get noticed on the tracker though