Posted by nigelcunningham on April 2, 2025 at 1:34am

Fix XSS issue - sanitisation of rot13 decoded text. Requires admin access or admin (mis)configuration of text filters to allow Full HTML text format for non-admins (or equivalent) and other configuration steps before this issue can be exploited.

VCS Label
2.0.1
Release type
Security update
Short description
Possible XSS if Full Text format allowed for non-admins and ROT 13 enabled
Packaged Git sha1
167a913047fc5bd5f56dce513c33d807f38098e3
Release files
e25002d70829e13054b3bdca9b3d5d44
Release file SHA-1 hash
96119c15c78d6c7f1e74f9822cd8fb1d991d6953
Release file SHA-256 hash
85d460dd0daf95e011a5bd53eb49bcad0f9279c69f0bf93f026645aa336aa986
a4936d3edf60848016c9beca38305674
Release file SHA-1 hash
6a87ff6955bb0c5508f2cac3e92c6adbcd0013e3
Release file SHA-256 hash
4f732683c10870277038c0df662269c1a3704c2d252a834b338ba31b694a32d7