# Security Advisory - HostBill version 2013-12-14

- URL: https://blog.hostbillapp.com/2013/12/14/security-advisory-hostbill-version-2013-12-14/
- Published: 2013-12-14 (updated 2020-04-14)
- Author: HostBill Team
- Categories: Announcements
- Tags: security

> We’ve just released security update for HostBill, as a response to potentially dangerous XSS Vulnerability.

We’ve just released security update for HostBill, as a response to potentially dangerous XSS Vulnerability.

**Applying update**

To apply security update please download and update HostBill to the lateste 2013-12-14 version.

You can also use our auto-upgrade plugin to perform this automatically.

Upgrading to new version: [https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/491585/Upgrading+to+new+version](https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/491585/Upgrading+to+new+version)

Using auto upgrade plugin: [https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/491588/Auto-Upgrade+plugin](https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/491588/Auto-Upgrade+plugin)

We believe that this vulnerability is not known to the public. Its severity depends on admin area protection.

KBKP Software always encourages our clients to take extra steps for protection:

[https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/1212438/Security](https://hostbill.atlassian.net/wiki/spaces/DOCS/pages/1212438/Security)

Big thanks to team Rack911 ([https://www.rack911.com/](https://www.rack911.com/)) for identifying and reporting this problem.