XOOPS 2.5.6  current users are encouraged to download and apply a Security Patch.

XOOPS is an acronym of eXtensible Object Oriented Portal System. Though started as a portal system, XOOPS is in fact striving steadily on the track of Content Management System. It can serve as a web framework for use by small, medium and large sites. 

Changes Details

• This security patch fixes some potential XSS issues discovered by Mehdi Dadkhah and fixed by Richard Griffith.

While 2.5.6 Websites that have currently installed Protector are safe from this XSS vulnerability, we recommend strongly to apply this patch to ALL XOOPS 2.5.6 Websites.

For users of XOOPS Versions older than 2.5.6
Please update AS SOON AS POSSIBLE to XOOPS 2.5.6. As always, the current versions are always the most stable and safest, i.e. older versions might be open to vulnerabilities that has been already fixed in the current version.

More Information

• Try Online Demo:
  Xoops (Softaculous external link)
  Xoops Changelog (Official website, external link)

• Start Xoops:
  In order to use Xoops you need a domain name (ex. yoursite.com) and web hosting service.
  If you don’t have a domain name Register a Domain Name.
  To install Xoops choose one of our hosting plans. (all our packages includes Softaculous).

• Hosted Xoops
  Contact us if you don’t need a domain or hosting service, and want to use Xoops anyway.

[otw_is sidebar=otw-sidebar-8]

The post Xoops Security Patch 2.5.6 appeared first on Orange Internet Solutions.