����JFIF��x�x����'
Server IP : 78.140.185.180 / Your IP : 18.218.185.164 Web Server : LiteSpeed System : Linux cpanel13.v.fozzy.com 4.18.0-513.11.1.lve.el8.x86_64 #1 SMP Thu Jan 18 16:21:02 UTC 2024 x86_64 User : builderbox ( 1072) PHP Version : 7.3.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /var/softaculous/conc85/ |
Upload File : |
8.5.15 Behavioral Improvements Ignore E_USER_NOTICE and E_USER_DEPRECATED errors (thanks mlocati) Do not combine CAPTCHA JS because it fails to load in some cases (thanks JeRoNZ) Removed some extraneous and unnecessary files from the ckeditor js/ directory. Bug Fixes Fixed “CKEditor is not secure” notice when loading CKEditor. Developer Updates formatSize() now supports sizes beyond gigabytes (thanks mlocati) 8.5.14 Bug Fixes We continue to support TLS 1.2 in Zend Mail (thanks hissy, mlocati) Security Fixes Fixed CVE-2023-48653 Cross Site Request Forgery (CSRF) via ccm/calendar/dialogs/event/delete/submit by updating Update Dialog endpoints to only accept Post requests with tokens included with commit 11765 for 8.5.14. Prior to fix, an attacker can force an admin to delete events on the site because the event ID is numeric and sequential. The Concrete CMS Security team scored this 4.3 with CVSS v3 vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Thanks Veshraj Ghimire for reporting. Fixed CVE-2023-48650 Stored XSS in Layout Preset Name with commit 11765 in 8.5.14. The Concrete CMS Security team scored this 3.5 with CVSS v3 vector AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N Thanks Solar Security CMS Research, [d0bby](with https://hackerone.com/d0bby), wezery0, silvereniqma in collaboration for reporting! 8.5.13 Bug Fixes Fixed bug where Express association control would be required if present in form even if the admin hadn’t marked it as required (thanks yildirimmurat) Fixed link to user profile from Communty authentication (thanks mlocati) Fixed some instances where the CollectionSearchIndexAttributes table might be updated based on the latest version instead of the approved version (thanks biplobice) Fixed: Gettext uses deprecated array_key_exists() which throws a ConversionException on PHP 7.4 (thanks 1stthomas, mlocati) We now properly sanitize the output of files uploaded through Express Forms. 8.5.12 Bug Fixes More PHP 5 fixes (thanks mlocati) Improved testing for PHP 5 compatibility