We've released a security update for Invision Community 5.0.7 for those using Invision Community Classic.

We recommend that all those using Invision Community Classic update using the AdminCP as soon as possible. To do this, log into your AdminCP, head to System > Support and apply the patch from the top left box.

Please note that Invision Community Cloud and Enterprise customers already have this security update applied.

What does this update do?

The update fixes a security vulnerability with the theme editor. This issue was reported to us by Egidio Romano from Karma(In)Security. We thank Egidio for reporting this issue to us.

I'm using the self hosted version (Invision Community Classic) on a version older than 5.0.7, what should I do?

You can upgrade to 5.0.7 via the AdminCP. Follow the instructions in the banner to upgrade to the latest version which has been updated to include the security update.

I'm using the self hosted version (Invision Community Classic) who upgraded to 5.0.7 previous to this announcement, what should I do?

You can use the patch system as described at the top of this post.

I'm using Invision Community Cloud, what should I do?

You don't need to do anything. All packages except Invision Community Classic are already protected even if you're not on the latest version.

If you have any questions, let me know!

I'm using the patch process, I get to the login/confirmation switch and then just get a spinny circle and it returns to that.

Logs:

LogicException::0

#0 /var/www/vhosts/cheersandgears.com/dev.cheersandgears.com/applications/core/modules/admin/system/upgrade.php(576): IPS\core\modules\admin\system\upgrade->_getDownloadKey()

#1 /var/www/vhosts/cheersandgears.com/dev.cheersandgears.com/system/Helpers/Wizard/Wizard.php(194): IPS\core\modules\admin\system\upgrade->_login()

#2 /var/www/vhosts/cheersandgears.com/dev.cheersandgears.com/applications/core/modules/admin/system/upgrade.php(171): IPS\Helpers\Wizard->__toString()

#3 /var/www/vhosts/cheersandgears.com/dev.cheersandgears.com/system/Dispatcher/Controller.php(139): IPS\core\modules\admin\system\upgrade->manage()

#4 /var/www/vhosts/cheersandgears.com/dev.cheersandgears.com/applications/core/modules/admin/system/upgrade.php(116): IPS\Dispatcher\Controller->execute()

#5 /var/www/vhosts/cheersandgears.com/dev.cheersandgears.com/system/Dispatcher/Dispatcher.php(169): IPS\core\modules\admin\system\upgrade->execute()

#6 /var/www/vhosts/cheersandgears.com/dev.cheersandgears.com/admin/index.php(15): IPS\Dispatcher->run()

#7 {main}

Edited May 12May 12 by CheersnGears

Me too.

and me

That should be fixed now.

It's updated for me.

Patch went through just fine here.

Patched here. All good. Thanks

Patched without an issue here as well. 👌

Perhaps I missed it, but was a stable, production version of 5.x released for self-hosted users? There was never an announcement in my ACP to upgrade.

Hi @bassangler,

Invision Community 5 has definitely been released! 🥳

You can read the release topic below.

To download the new version, go to your Client Area → Manage this purchase → Download Invision Community 5 (the current stable release is 5.0.7). Upgrading from version 4 to version 5 requires uploading the downloaded files and folders to your server/hosting service manually.

Edited May 13May 13 by Gary

The update went smoothly

No issues for me.

Hi, we don't have any button to apply the patch on our self hosted version of 5.0.7 :

Edited May 13May 13 by GfxMan

Hi @GfxMan,

If you have a look under the first tile where it says Invision Community Version 5.0.7, there is a button that says 'Fix This'. Click that button and follow the prompts to successfully install the patch. 😉

2 minutes ago, Gary said:

Hi @GfxMan,

If you have a look under the first tile where it says Invision Community Version 5.0.7, there is a button that says 'Fix This'. Click that button and follow the prompts to successfully install the patch. 😉

Sorry colored green it went unnoticed

Don't be! It happens to the best of us. 👌

3 minutes ago, CheersnGears said:

I'm using the patch process, I get to the login/confirmation switch and then just get a spinny circle and it returns to that.

21 hours ago, Ryan Ashbrook said:

That should be fixed now.

Fixed for me now. Patch applied successfully.

Nice, great fix.

Edited May 13May 13 by G17 Media

On 5/12/2025 at 5:48 PM, Gary said:

Hi @bassangler,

Invision Community 5 has definitely been released! 🥳

You can read the release topic below.

To download the new version, go to your Client Area → Manage this purchase → Download Invision Community 5 (the current stable release is 5.0.7). Upgrading from version 4 to version 5 requires uploading the downloaded files and folders to your server/hosting service manually.

Hoo boy! Looks like I have some work to do! How long will 4.7 be supported?

4 hours ago, bassangler said:

Hoo boy! Looks like I have some work to do! How long will 4.7 be supported?

We don't have a definitive date at which we will stop support at present.

Ok, thanks. Sounds like I don't need to rush it and possibly make mistakes.