Nexter Blocks - FREE
24 days ago

Version 5.0.2

  • Security : Fixed Author+ Stored XSS via SVG upload (SVGs now restricted to trusted users and sanitized). Reported by Bob Matyas.
  • Security : Fixed Contributor+ Stored CSS Injection in the global CSS endpoint (now admin-only). Reported by Vaibhav Narkhede.
  • Fix : Minor Bugs and Improvements.

Discussion