Hi, some words about the vulnerability in tt_news: the affected/unsafe part of tt_news is the category menu (CATMENU) in mode "ajaxtree" when it is displayed on the website. That means: if you don't use a CATMENU on your website, you're save. greets Rupert