This version addresses reported security problems and updates SCEditor to the latest version.
🦺 Vulnerabilities (3)
- High risk: Visual editor persistent XSS (advisory) - reported by Aleksey Solovev (Positive Technologies)
- Medium risk: ACP Users SQL injection (advisory) - reported by Aleksey Solovev (Positive Technologies)
- Low risk: Attachment upload XSS (advisory) - reported by Aleksey Solovev (Positive Technologies)
- 1 issues resolved.
Click to download.