[Resuelto] Patchstack thinks Block <= 1.6.26 has an XSS vulnerability

[Autor]

Mensajes

[scottL-3]

Patchstack thinks Block <= 1.6.26 has an XSS vulnerability and says 1.6.27 fixes it but there is no 1.6.27 yet as far as I can tell.

WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability
Patchstack Priority:
Medium

enlace oculto

[Minesh]

Hello. Thank you for contacting the Toolset support.

We already fixed the issue and its currently undergoing testing.

Please hold on, I will update you as soon as I've update on this (very soon).

[Minesh]

I've good news for you. The security issue you reported with this ticket is been fixed and you can download the latest Toolset Blocks/Views plugins from your account's Downloads page:
=> https://toolset.com/account/downloads/

The new hotfix version for:
(you can visit the changelog to know other fix included with this release):
- Toolset Blocks v1.6.27
=> https://toolset.com/download/toolset-blocks/#changelog

- Toolset Views v3.6.27
=> https://toolset.com/download/toolset-views/#changelog

You can download the latest version and manually replace with your existing Blocks/Views plugin after login to admin using the plugins page.

Please note that:
- if you are using Blocks then Download and install the Blocks plugin.
- If you are using Views then Download and install the Views plugin.