Do I need to update VM to avoid an exploit?

[tim92109]

I noticed that there was an exploit in VM 2.0.22a

I have a previous client that is using VM 2.0.20b, which is not the same version.  But the VM AIO version is 2.0.22a.   So is that client's site vulnerable? 

Thanks!

[jenkinhill]

All VM versions prior to VM2.0.22c are insecure. See http://forum.virtuemart.net/index.php?topic=118683.0