This version if a security update version, that aim to resolve several CVE in Bludit/Koblog.

Fixes

  • Remove uses of PHP8+ type casting (the CMS is supposed to be supported with PHP 7.1)
  • Sanitize SVG inputs in media and image upload to avoid XSS (CVE-2020-15026, CVE-2023-31698, CVE-2023-34845)
  • Sanitize internal admin function showAlert() to avoid XSS (CVE-2020-13889)
  • Sanitize article input to avoid XSS (CVE-2020-8812, CVE-2022-1590, CVE-2024-25297)
  • Sanitize friendly URLs and data keys (CVE-2023-24675)
  • Sanitize data names (CVE-2021-45744)
  • Use stronger password hash (CVE-2024-24553)
  • Regenerate session ID on each login (CVE-2024-24552)

Modified

  • Gender-neutral french translation