Vicious ad window

jeremie / 2019-06-12 18:52:48   

Since one week an ad window appears on each page of my website. I've upgraded PHP to latest version (7.2) + automatically redirect to https + upgraded Indexhibit but the window is still there (using Safari). My host says "It seems that there are some vulnerabilities in Indexhibit that allow to inject malicious code"...
Thanks for your help

Vaska A / 2019-06-12 19:05:00   

When you upgraded did you check your theme for issues? Did you replace files in /ndxzsite (as was instructed)?

I can see a script in your theme that probably shouldn't be there...

jeremie / 2019-06-12 22:04:24   

Yes right, the mean code was in the post-navigation text (how come ?!)
I erased it and the ad window is gone.
Thank you!

Vaska A / 2019-06-12 22:23:36   

Because there was a vulnerability that was found (thanks to a security researcher). You need to update the files in /ndxzsite/plugins, too.

This is why I update Indexhibit - and people should keep an eye on their site.

This thread has been closed, thank you.