This release of vBulletin fixes an unpleasant cross-site scripting flaw in the 3.0.x branch. We recommend all customers running previous versions of vBulletin 3.0.x to upgrade or patch to 3.0.14 as soon as possible.
В vBulletin 3.5.x и vBulletin 2.3.x дырки нету!
We always recommend that customers perform a full upgrade to the current version using install/upgrade.php, but if time does not permit, or for whatever other reason an upgrade would be problematic, a patch is available. Details follow: