Compatible XF Versions
  1. 2.2
XenForo 2.2.1 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.2 upgrade to this release to benefit from increased stability.

Most importantly, this release fixes two potential security vulnerabilities in XenForo.

The issues are XSS vulnerabilities. XSS (Cross Site Scripting) issues allow scripts and malicious HTML to be injected into the page, potentially allowing data theft or unauthenticated access.

XenForo extends thanks to security researcher Vincent ibn Winnie for reporting the issues.

We recommend doing a full upgrade to resolve the issues, but a patch can be applied manually. See below for further details.

Applying a patch manually​

Download the 221patch.zip file attached to this message. It will contain the following file:
  1. src/XF/BbCode/Renderer/Html.php
Extract the zip file to your computer and upload the contents to the root of your XenForo installation. This should overwrite the files on your server with the new version.

Note: If you decide to patch the files instead of doing a full upgrade, your "File health check" will report these three files as having "Unexpected contents". Because these files no longer contain the same contents your version of XF was shipped with, this is expected and can be safely ignored.

For instructions on how to resolve the issue by upgrading, and to see what else has changed in XenForo 2.2.1, please read on.

Download XenForo 2.2.1

From the licensed customer area


Some of the other changes in XF 2.2.1 include:
The following public templates have had changes:
  • alert_post_pre_reg
  • app_nav.less
  • attachment_macros
  • content_vote_macros
  • message.less
Where necessary, the merge system within the "outdated templates" page should be used to integrate these changes.

As always, new releases of XenForo are free to download for all customers with active licenses, who may now grab the new version from the customer area or upgrade from your Admin control panel (Tools > Check for upgrades...).

Current Requirements​

Please note that XenForo 2.2 has higher system requirements than earlier versions.

The following are minimum requirements:
  • PHP 7.0 or newer (PHP 7.4 recommended)
  • MySQL 5.5 and newer (Also compatible with MariaDB/Percona etc.)
  • All of the official add-ons require XenForo 2.2
  • Enhanced Search requires at least Elasticsearch 2.0.
Author
Admin
Size
13.6 MB
Extension
zip
Downloads
7
Views
2,812
First release
Last update

More resources from Admin

Similar resources

XenForo Full (Includes Security Fix) AnimeHaxor
XenForo 2.1.7 (Includes Security Fix) - Full Nulled By NulledTeam
0.00 star(s) 0 ratings
Downloads
17
Updated
XenForo Full (Includes Security Fix) Admin
XenForo 2.1.11 (Includes Security Fix) - Full Nulled By NulledTeam
0.00 star(s) 0 ratings
Downloads
4
Updated
XenForo Full (Includes Security Fix) Admin
XenForo 2.1.12 Full Nulled By NulledTeam (Includes Security Fix)
0.00 star(s) 0 ratings
Downloads
6
Updated
XenForo Full AnimeHaxor
Released (Unsupport) XenForo Full 2.0.0 beta 4 Nulled
XenForo - Full (Unsupported) 2.0.0 beta 4
0.00 star(s) 0 ratings
Downloads
28
Updated
XenForo Full Admin
xF2 Released XenForo Full 2.2.5 Nulled
XenForo 2.2.5 Full Nulled By NulledTeam
0.00 star(s) 0 ratings
Downloads
8
Updated