News items tagged with "bugs"

Patch #6 Released for V2.4.1 to fix a few Big Issues

September 2, 2017 Tags: patch, release, bugs

This patch fixes two big problems in v2.4.1 patch #5 (and prior): where a custom WYSIWYG Editor configuration may cause a page's javascript to crash (making a page display odd); and several Workflow issues. It also addresses several other problems users may experience. We strongly encourage all Exponent installations be upgraded to v2.4.1 as soon as practical! Patch #6 to v2.4.1 is found at http://sourceforge.net/projects/exponentcms/files/exponent-2.4.1-patch-6.zip/download 
  (read more)

Version 2.4.1 Released

January 6, 2017 Tags: release, bugs, security

This version, code-named 'Frosty Freezer' continues to address security issues and screen reader (accessibility) support by fixing issues with the previous release . We strongly encourage all Exponent installations be upgraded to v2.4.1 as soon as practical! (read more)

Version 2.4.0 Released

October 29, 2016 Tags: release, bugs, security

This version, code-named 'Limited Lockdown' fixes many security issues in all previous versions and adds screen reader (accessibility) support. We strongly encourage all Exponent installations be upgraded to v2.4.0 as soon as practical! (read more)

Security Vulnerability - All Exponent Versions - October 2016

October 29, 2016 Tags: release, bugs, security

There are several security vulnerabilities in all versions of Exponent 2.x found in September and October, 2016, reported by a number of individuals including:Manuel Garcia Cardenas, the PKAV TEAM, fyth, felixk3y, DM_, obfusor, xiaoL, ylgaaaaa, Tomato, wooeast, and xiojunjie, These vulnerabilities could allow possible SQL injections, remote file exploits, RCE, XSS, changes to configurations, and other issues. They have been present in all versions of Exponent (2.x). The fix is: (read more)