A security update for HostBill has been released for all HostBill versions – please update your HostBill to the most recent version.

We have identified a security issue that affects all HostBill versions until 2026-08-31 release.  This issue involves a High-severity Cross-Site Scripting (XSS) vulnerability.

Resolution:

To mitigate this issue please update your HostBill to the most recent release, version 2026-08-31, either manually or using the Auto-Update plugin.

We do not have any basis to think the issue is known in public.