Release v7.6.61
WPDiscuz v7.6.61
What's new in v7.6.61
WPDiscuz v7.6.61 was released on . AJAX realtime comment system with custom comment form and fields. See the full changelog below and compare with the complete version history.
Release details
Released
6.9 MB
File unavailable
Changelog
Fixed
- Stored XSS vulnerability in the comment image URL conversion. Image URLs are now escaped for HTML attribute output. Thanks to hieus for responsibly reporting the issue.
- Missing escaping on the custom URL field value and the default avatar image URL.
- A leftover debug function call in the default avatar handler.
Compatibility
- Requires WordPress
- 6.0
- Tested up to
- 7.1
- Requires PHP
- 7.4