Add MyBB 1.8.37

_versions/1.8.37.md

@@ -0,0 +1,176 @@
+---
+title: "Version 1.8.37"
+
+version_number: "1.8.37"
+version_code: "1837"
+release_date: "2023-11-04"
+
+packages:
+  - type: mybb
+    formats:
+      - type: zip
+        filesize: "2.21 MB"
+        checksums:
+          - type: md5
+            value: c34ce080cf8e4ab06ade5215b38aecb9
+          - type: sha1
+            value: 3a7e4fe9f0e10b6502f1007e5462e36ab5ccd223
+          - type: sha256
+            value: e8d23a5af78fada913f9b09d98d0bb00ec9533c48e0e5bb83c23c9e81ce82480
+          - type: sha512
+            value: dfd5bf51316c6b72556735aa9a0ad4a77181db0aa86d4dfc4dacd27e324a5498c0d43fab2c2ea40bab2117b4a3ef5d1349d021ff2b97a45cae348efac8597f8f
+        locations:
+          - name: resources.mybb.com/downloads/
+
+  - type: changed_files
+    formats:
+      - type: zip
+        filesize: "0.87 MB"
+        checksums:
+          - type: md5
+            value: da3285313446ae08af02a89c752da6b1
+          - type: sha1
+            value: e9a2012aa47e8157a772f679a4fbeea6f222263f
+          - type: sha256
+            value: c0eda331121e91d4ea17989ea0e8abd56b9ddc90f812e361d9559da5fdc43a6e
+          - type: sha512
+            value: 04d6937d66fc708c908093058287386122c1157d8880aa43e1f8eccdf8ea901e544092340acc93211107996955c10685a4497fbe3da51f59cc188909f8725e4c
+        locations:
+          - name: resources.mybb.com/downloads/
+
+upgrade_script_required: true
+resolved_issues_number: "12"
+resolved_issues_link: "https://github.com/mybb/mybb/issues?q=is%3Aissue+is%3Aclosed+label%3As%3Aresolved+-label%3Adev-branch+milestone%3A1.8.37"
+
+comment: |
+   This version includes improvements for compatibility with mailing configurations and recent PHP versions.
+
+resolved_security_issues:
+  - description: "Visual editor size code persistent XSS"
+    severity: "medium"
+    cve_id: "CVE-2023-46251"
+    cwe_id: "CWE-79"
+    cwe_name: "Cross-site Scripting"
+    cwe_type: "persistent"
+    cvss_score: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    reported_by:
+      - name: "Paulos Yibelo"
+        affiliation: "Octagon Networks"
+  - description: "ACP Themes persistent XSS"
+    severity: "low"
+    cve_id: "CVE-2023-45556"
+    cwe_id: "CWE-79"
+    cwe_name: "Cross-site Scripting"
+    cwe_type: "persistent"
+    cvss_score: "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"
+    reported_by:
+      - name: "Or4nG.M4n"
+
+changed_language_files_number: "1"
+
+changed_files:
+  - admin:
+    - inc:
+      - functions_themes.php
+    - modules:
+      - config:
+        - badwords.php
+        - banning.php
+        - calendars.php
+        - help_documents.php
+        - mod_tools.php
+        - mycode.php
+        - post_icons.php
+        - questions.php
+        - report_reasons.php
+        - settings.php
+        - smilies.php
+        - spiders.php
+        - warning.php
+      - forum:
+        - announcements.php
+        - attachments.php
+        - management.php
+      - style:
+        - templates.php
+        - themes.php
+      - tools:
+        - mailerrors.php
+        - maillogs.php
+        - tasks.php
+        - warninglog.php
+      - user:
+        - banning.php
+        - group_promotions.php
+        - groups.php
+        - mass_mail.php
+        - titles.php
+        - users.php
+    - index.php
+  - archive:
+    - global.php
+    - index.php
+  - inc:
+    - datahandlers:
+      - pm.php
+      - user.php
+      - warnings.php
+    - languages:
+      - english:
+        - admin:
+          - user_mass_mail.lang.php
+      - english.php
+    - mailhandlers:
+      - php.php
+      - smtp.php
+    - tasks:
+      - delayedmoderation.php
+    - class_core.php
+    - class_custommoderation.php
+    - class_datacache.php
+    - class_session.php
+    - functions.php
+    - functions_online.php
+    - functions_post.php
+    - functions_search.php
+    - functions_task.php
+    - functions_upload.php
+    - functions_user.php
+  - install:
+    - resources:
+      - mybb_theme.xml
+      - upgrade58.php
+    - upgrade.php
+  - jscripts:
+    - bbcodes_sceditor.js
+  - attachment.php
+  - calendar.php
+  - editpost.php
+  - forumdisplay.php
+  - global.php
+  - managegroup.php
+  - member.php
+  - memberlist.php
+  - misc.php
+  - modcp.php
+  - moderation.php
+  - newreply.php
+  - newthread.php
+  - polls.php
+  - portal.php
+  - private.php
+  - ratethread.php
+  - report.php
+  - reputation.php
+  - search.php
+  - sendthread.php
+  - showthread.php
+  - stats.php
+  - usercp.php
+  - warnings.php
+  - xmlhttp.php
+
+changed_templates:
+  - codebuttons
+
+---