Skip to main content

FluentCRM

#General

Why no notice of security vulnerability patched in 3.1.8??

Or did I miss it? I didn't learn about it until Wordfence notified me.

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/fluent-crm/fluentcrm-email-newsletter-automation-email-marketing-email-campaigns-optins-leads-and-crm-solution-317-unauthenticated-stored-cross-site-scripting

  • 1 like
  • 1 comment

Shahjahan Jewel

We have added that on our changelog. Also it was not a serious security issue that need to be raised. So if you are an admin then you may save some contact data which was not sanitized. So it’s not in authenticated data sanitization issue.