Accounts accessed (hacked) in our forum 3.8.5
 

Hi,
We are using 3.8.5, and we got admins accounts hacked (accessed)!
the passwords were strong,
and we think the hacker were able to access the accounts through xss methods, we are not sure.

please help us to stop this hack, and solve this security hole.

thanks,,