iCagenda / ChangeLog

Keep Connected!

3.7.4

    Legend: !important +added -removed ~changed #fixed
    Info: access to the beta versions and pre-releases are reserved to users with a valid pro subscription.
    iCagenda™ is distributed under the terms of the GNU General Public License version 3 or later; see LICENSE.txt.

  iCagenda 3.7.4 (2018.09.26) Security Release

  • #
    [SECURITY][MEDIUM] Exploit type: XSS
  • Severity: Low
  • Versions: 3.6.7 through 3.7.3
  • Description: Inadequate input filtering on the list of events page, when frontend search filters enable. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the current page url.

Follow Us

Search