Today, we are releasing XenForo 2.2.17 to address a potential security vulnerability.

We recommend that all customers running XenForo 2.2 upgrade to 2.2.17 or use the patch instructions below as soon as possible.

Notes:
a. XenForo 2.3.1 and above is not affected by this issue. If you are still running XenForo 2.3.0 you should upgrade to the latest release.

The issue relates to a potential redirection exploit using a specially crafted URL.