ImpressCMS 1.4.2, a security and maintenance release of the ImpressCMS 1.4 branch is now available. This release fixes multiple vulnerabilities that were discovered at the start of our collaboration with HackerOne.
Just in time for the holidays, ImpressCMS 1.4.2 is now available to start up new and upgrade existing websites. This release fixes several bugs, and resolves also several vulnerabilities that were found thanks to diligent HackerOne members around the globe.
The full list of changes in this release is available on our release page on Github.
This new release is available for download here
UPDATE 26 Dec 2020 : the 1.4.2.bis release is now live, there was a small error in the package.