One for the admins me thinks,
I am being asked for a username and password when ever I click on a reply or new topic link on the forums ( as per screen shot )
I’m already logged in and when I click cancel to page loads ok but thought I would bring to your attention just incase.
Thanks for reporting this guys. We have identified a successful attack against a vulnerability in some 3rd-party unit testing files that were left accessible to the production server. The rogue code has been cleaned and the attack vector closed. We are analyzing the logs and file system to identify any other files that may have been compromised, but please let us know if you notice any other suspicious content when browsing the forums or the MODx web site.
Would you know why its requesting the password even though we are already authenticated? Once the password is typed in, the prompt goes away.
The issue can be replicated by setting a ’Master Password’ on (i assume) all versions of Firefox (tested on FF4 beta 8 ).