• Posted by fiammybe
• Posted on 12/20/2018

ImpressCMS 1.3.11

ImpressCMS 1.3.11 is now available to power your websites. This maintenance release of the 1.3 series contains security improvements, and multiple languages added to the core.

The 1.3.11 version is a maintenance release of the 1.3 branch, and includes several bugfixes, updates and improvements, including 2 security improvements in our installation routine.

security improvements

Omar Kurt from Netsparker contacted us about different cross-site-scripting (XSS) and injecting vulnerabilities in the installation pages. These were fixed, but given the location of the vulnerabilities, and the fact that the files normally do not exist on live sites, we considered them to be less critical. That doesn't mean we didn't fix them.

Improvements

#109 - Add extra metadata types property and itemprop
#121 - System module now shows the correct version number after install

Fixes

#102 - pagination in the backend generates wrong URLs
#116 - Update the links to our website
#119 - Update system requirements in installer
#117 - update links to translations in installer

Update

#296 - Update HTMLPurifier to 4.10
#297 - Update GeSHI to 1.0.8.13
#299 - Update jQuery to 3.3.1
#125 - Upgrade PHPMailer to 5.2.26