Issue Reminder to update PHP if you haven't already

[Grzesiek11]

A pair of critical PHP vulnerabilities have been released today.

PHP (first post, I can't seem to be able to link to it properly)

This 100% affects this forum if it's not been updated, and would allow for a full takeover. Since it seems to use CF, it might not be as much of an issue, because it's WAF supposedly already has some mitigations, but it's important to do it regardless.

 

[Vector]

Site with links to the CVEs and mitigation instructions: PHP2Shell — AI uncovers critical vulnerabilities in the backbone of the web

This is as bad as the Heartbleed exploit in OpenSSL a few years back.