A dynamic system based on flexible and granular permissions,
with spam protection, forums, file management, media gallery,
calendars, polls, site-wide search, RSS feeds, and more!
Frustrated by hunting for compatible 3rd party plugins?
glFusion offers it all right out of the box!
A Cross-site scripting (XSS) vulnerability has been found the File Management plugin used by the CKEditor in glFusion. XSS enables attackers to inject client-side script into Web pages viewed by other users. The issue was found by Mohammad Sikkandar Sha.
To resolve the issue - plesae remove the following directories from your glFusion system:
You may delete all the files in the above directories and remove the directories without affecting the use of the File Manager plugin in CKEditor. These directories contain demo and test code and are not needed for normal use.
Please remove these directories as soon as possible.
- The glFusion Support Team
The Paypal Plugin for glFusion has been updated version 0.5.6.
This release fixes some database schema inconsistencies from previous installations, and also fixes an discrepancy between the button type selections on the product form and the values expected with the product is saved.
|glFusion Add-on, Plugin Support||evList still has major month/weekly view display bug||07/07/15 10:19 am|
|glFusion Add-on, Plugin Support||Can't add remote youtube video to media gallery||07/07/15 08:23 am|
|glFusion Add-on, Plugin Support||Forum dates||07/07/15 08:21 am|
|glFusion Development||Replace Mootools with Jquery in gl1.4.3||07/06/15 09:22 pm|
|glFusion Support||AD Authentication / Registration||07/05/15 09:40 am|
|glFusion Support||Static Pages||07/02/15 07:30 pm|
|glFusion Support||Bungled upgrade||07/02/15 11:50 am|
|glFusion Support||Header background Slide||06/29/15 11:50 am|
|glFusion Support||migrate user||06/25/15 09:31 pm|
|glFusion Add-on, Plugin Support||Evlist - Upcoming events in list view||06/25/15 06:56 pm|