CSZ CMS NEWS: about version 1.3.2
Category: Upgrade News | Posted date: 2025-11-03 00:00:00 | Updated date: 2025-11-03 02:22:14 | Posted by: CSZCMS Admin
CSZ CMS upgrade news about version 1.3.2, Fix to important bug and security bug.
RELEASE NOTES FOR 1.3.2
- It can add the Article date when create new one.
- Update elFinder to 2.1.66.
- Remove default email and pass on installation page.
- Remove manual upgrade function on backend for security below.
- Security issue: https://github.com/fax77829yz/CSZ_CMS-exploit (The SQL commands are not sanitized through the upload function, allowing attackers to execute arbitrary code by uploading a crafted ZIP file containing malicious SQL commands)
- Security issue: https://github.com/capture0x/CSZ_CMS (CSZ CMS Version 1.3.0 Remote Command Execution)
- Support PHP 8.3.
- Fixed more important bug.
This upgrade has to fixes important bug and security bug.
This version available now. Please check your backend to upgrade.
If you find the bug for CSZ CMS. Please tell us at here