Der beliebte Webshop PrestaShop erhielt das Maintenance Update 8.0.4. Das Release schließt 3 sicherheitsrelevante Lücken und behebt einige Fehler im Back Office, im Core und Installer von PrestaShop.
PrestaShop 8.0.4 Release Notes
Back Office:
- #32028: Fix module active flag with group & shop contexts (by @boherm)
- #32028: Fix module active flag with group & shop contexts (by @boherm)
- #31411: Display error message when language file is missing (by @Prestaworks)
- #31390: Ignore attribute_quantity if stock management disabled (by @bibips)
- GHSA-8r4m-5p6p-52rp Fix arbitrary file ready through sql manager
Core:
- Improvement:
- #31285: Allow JS action after module import (by @sowbiba)
- Bug fix:
- GHSA-fh7r-996q-gvcp Fix possible XSS injection through Validate::isCleanHTML method
- GHSA-p379-cxqh-q822 Fix executeS method making sure it does selection only (found by truff@projet7.org / Sébastien Cantos)
Installer:
- Bug fix:
- #32112: Handle fallback in Tools::clearSf2Cache when container is not available (by @jolelievre)
Web Services:
Quelle: PrestaShop 8.0.4 is available (prestashop-project.org)