Codeigniter 3.1.3

Security: Fixed an email handling issue, and an XSS vulnerability, as well as some CSRF hardening.

Bug fixes: for the Database, Email, File Uploading, Image Manipulation, Input, Loader, Output, Query Builder, Session, and XML-RPC libraries; as well as for the Date helper and the bootstrap file.

• Security
  • Fixed an XSS vulnerability in Security Library method xss_clean().
  • Fixed a possible file inclusion vulnerability in Loader Library method vars().
  • Fixed a possible remote code execution vulnerability in the Email Library when ‘mail’ or ‘sendmail’ are used.
  • Added protection against timing side-channel attacks in Security Library method csrf_verify().
  • Added protection against BREACH attacks targeting the CSRF token field generated by Form Helper function form_open().
• General Changes
  • Deprecated $config['allow_get_array'].
  • Deprecated $config['standardize_newlines'].
  • Deprecated Date Helper function nice_date().
• See more detail at https://www.codeigniter.com/user_guide/changelog.html

For CSZ CMS been update the Codeigniter core to 3.1.3 on next version (CSZ CMS 1.1.5)