CMS 1.0.8.4 Security Advisory: Authorization Checks and URL Validation Fixes

Vulnerability Overview Vulnerability Name: Not explicitly named, but involves multiple security-related fixes. Vulnerability Description: Fixes multiple security-related issues, including URL validation, prevention of recursive exceptions, and permission checks. Impact Scope Affected Components: - Digital assets - Subdirectory - Products - Comments - Posts - Post revisions - Product revisions - Product reviews - Product questions - User groups - Product variants Remediation Specific Fixes: - Added an column for digital assets. - Fixed a URL validation issue reported by . - Removed subdirectory references from subdirectory installation requests. - Ensured PHP closes the session. - Prevented recursive exceptions. - Added filters to output. - Fixed component template issues. - Embedded the video component. - Fixed Blockquote alignment options. - Fixed the social icon component selector. - Rendered components after insertion. - Fixed Tinymce image upload issues. - Fixed error messages. - Fixed subdirectory path separators on Windows. - Fixed the type of . - Added subdirectory to the site path. - Removed redundant code. - Added support for Taxonomy tag types. - Fixed Sijixe formatting issues. - Fixed escape macro issues. - Fixed blog post category list issues. - Fixed user group issues. - Product variants are generated only for selected product options. - Added capability checks to allow listing, reading, approving, editing, or deleting posts. - Added capability checks to allow listing, reading, approving, editing, or deleting comments. - Added capability checks to allow listing, reading, approving, editing, or deleting products. - Added capability checks to allow listing, reading, approving, editing, or deleting post revisions. - Added capability checks to allow listing, reading, approving, editing, or deleting product revisions. - Added capability checks to allow listing, reading, approving, editing, or deleting product reviews. - Added capability checks to allow listing, reading, approving, editing, or deleting product questions. - Added capability checks to allow listing, reading, editing, or deleting digital assets. - Cart data is written only when the data has changed. - Renamed . - Added URL slug options for the site's primary language. - Updated Swiper. POC Code or Exploit Code No specific POC code or exploit code was included in the page. Summary This version (1.0.8.4) primarily addresses multiple security-related issues across various components and functionalities, ensuring the stability and security of the system.

Goal Reached Thanks to every supporter — we hit 100%!

CMS 1.0.8.4 Security Advisory: Authorization Checks and URL Validation Fixes

More from this source