• Illecors@lemmy.cafeM
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    I’ve checked the admin activity, the logs - nothing suspicious.

    I’ve also found the description of the vulnerability - it was an XSS attack abusing custom emojis.

    I have never added any. I have also checked the database and there are no custom emojis on this instance. Everything appears to be fine for now. Will update to the fixed release as soon as it’s available.