HortusFox

Version 6.2 of HortusFox - Cozytober Patch

Changelog

• Fixed security vulnerability GHSA-4w8p-x2jj-42w7
• Fixed security vulnerability GHSA-8phf-v3xj-8jjg
• Fixed security vulnerability GHSA-8rwp-2337-54mm
• Fixed security vulnerability GHSA-pjvc-wpc6-wf73
• Fixed security issues related to SQL query tokenization, attachment linking and legacy file extensions (#572)
• Prevent importing potentially dangerous files (1c7108f23fa30759d6f3bf62f0cfbf975bdc0a3b)
• Remove unsafe files from imported themes (3b87393d38ce408ec6f0946ffb3cbf0d08b5f07c)
• New UI language available: italian (#554)
• Added console command product:info (f498dbe31c8175a83b7b4abde71ca00e3393ddad)
• Added console command migrate:email (#575)
• Added console command migrate:version (#573)
• Cronjobs are now only reachable via POST requests (#579)

Credits:

• https://github.com/lyn4r (vulnerability report)
• https://github.com/SLRHR (vulnerability report)
• https://github.com/hackchang (vulnerability report)
• https://github.com/albanobattistella (italian translation)