We've just released version 3.1.0.4 which has fixes to two vulnerabilities. All JomSocial site admins are encouraged to upgrade to this version as soon as possible.
You can download this latest version on our "My Licenses" page.
You can download FREE patch to all previous versions here:
We will have a blog post soon that explains about these issues.
What happened with JomSocial 3.1.0.3?
This hotfix that was released yesterday had a fix to one of the exploit, not both. Please upgrade again if you've already upgraded to 3.1.0.4. We apologize for any inconvenience.
