Skip to content
This repository has been archived by the owner on Apr 22, 2024. It is now read-only.

5.6.4.0

Latest
Compare
Choose a tag to compare
@aembler aembler released this 26 Feb 22:27
· 19 commits to master since this release
150aa36

5.6.4.0 is very likely the last release of legacy concrete5. It features:

  • Fixes a vulnerability which permitted authenticated users to view the contents of arbitrary messages sent through the My Account section.
  • PHP7 compatibility
  • User avatar updated to run without flash
  • Email validation fixed to allow TLDs with more than 3 characters
  • Multi-byte support in email validation
  • Short tags removed