vBulletin versions 2.3.9, 3.0.12, and 3.5.3 released.

[Brad]

A XSS (cross-site scripting) flaw has been discovered in all three branches of vBulletin, it's recommended that you upgrade your installation to the latest version.

vBulletin.com Announcement threads

vB 2.3.9: http://www.vbulletin.com/forum/showthread.php?t=170001

vB 3.0.12: http://www.vbulletin.com/forum/showthread.php?t=169999

vB 3.5.3: http://www.vbulletin.com/forum/showthread.php?t=169997

Upgrading vBulletin

Follow the instructions found here

Patch vBulletin

If you do not want to run the full upgrade at this time you should at least patch your installation. You can do this by using the files found below.

vB 2.3.9: Patch files

vB 3.0.12: Patch files

vB 3.5.3: Patch files

vB 3.5.x can also be patched with the plug-in system, click here for details.

Changed files/templates

A list of changed files/templates in the new version(s), this is helpful if you have made modifications to the source code or templates.

vB 2.3.9: list of changed files, No template changes.

vB 3.0.12: list of changed files, No template changes.

vB 3.5.3: list of changed files, list of changed templates.

Other bug fixes

vB 2.3.9: None

vB 3.0.12: None

vB 3.5.3: List of fixed bugs.