While XenForo Media Gallery is potentially affected by the server side request forgery (SSRF) issue patched by XenForo 1.5.10, following the steps in the XenForo 1.5.10 announcement is sufficient to fix the issue in XenForo Media Gallery 1.1.5 or newer.
If you are running XenForo Media Gallery 1.1.0 to 1.1.4, you must upgrade to 1.1.5 or newer and apply the XenForo 1.5.10 patch to fix the SSRF issue.
This release fixes several bugs that were reported following the release of XenForo Media Gallery 1.1.8:
- Implements better permission checks in the Media alert handler
- Resolves an issue which could see a thumbnail not created for short videos
- Photopost importer fixes
- Media and album comment likes now displayed correctly in the Admin CP Stats
Installation, Upgrading and Configuration
Please see our XenForo Media Gallery manual page for more information.