We want to keep you in the loop about an important issue concerning iloveuguys.org. We recently detected and addressed a security vulnerability related to a Cross-Site Scripting (XSS) exploit. This manifested in intermittent redirects to known phishing sites. Not consistant. Not every time. But intermittently. As a remedial measure, we have reverted our website to a version not dependent on WordPress. (WordPress is a popular system to manage and maintain websites. Apparently, it is a frequent target of ill-willed folk.)
On 2023-09-13, our team discovered a security vulnerability that could have potentially allowed malicious scripts to be executed. We also received a number of alerts from folks that frequent iloveuguys.org. Please be assured that no user data has been compromised. The affected features were isolated and we undertook immediate action to remediate the issue.
After our initial investigation, it was determined to be a redirect attack. We are confident that no user data was affected by this vulnerability. Our security policy remains that we don't store any user information directly on iloveuguys.org.
Our registration and form systems, managed via third-party services - RegFox, HubSpot, and ClickUp - assure security per their terms of use.
We migrated from our raw HTML site to a WordPress instance on May 27th, 2023. Because our IT team (Mostly JM) is a little skeptical, we retained the legacy version.
We have rolled back to that legacy version of our website as an interim measure to ensure overall security.
We are working diligently to restore all features in a secure manner as soon as possible.
Since we have reverted to a raw HTML version, we need to recreate some of the content that was previously available on the WordPress version. We apologize for any inconvenience this may cause. Bear with us as we get this settled. And of course, please let us know if you see something weird happening at iloveuguys.org.
We take your security seriously and will be monitoring our systems closely for any signs of vulnerabilities. We will be sure to update this page once the full functionalities of our site are back up and running.
Should you have any questions or concerns, please don't hesitate to send us an email at info@iloveugys.org.
We appreciate your patience and understanding as we work to restore the website and its functionalities and maintain the security of our platform.
To restore and protect the joy of youth through educational programs and positive actions in collaboration with families, schools, communities, organizations and government entities.