Hey!
Earlier today with the help of our Discord member, H4ck1+411, we have uncovered a security flaw that we needed to fix. Because of this, we are removing a few tags from PhantomBot.
These tags allowed a user to do a RCE (Remote Code Execution) to do things that we don't want our users to go through. We highly suggest that everyone updates to this version as this security flaw is in all previous versions prior to PhantomBot v2.4.2.1.
We're very sorry if this causes any inconvenience to anyone, but this needed to be done to make PhantomBot more secure.
To keep up to date with all PhantomBot news and updates, follow us on Twitter, and join our Discord server!
Removed:
- (math) tag.
- (runcode) tag.
Fixed:
- Subscription and re-subscription messages now correctly output the new total months, instead of cumulative months.