exceedone/exment v5.0.3

on GitHub

v5.0.3 (2022/08/17)

• We are working on fixing this vulnerability. Please be sure to update. Please check here

• Updating from v4.4.X or lower to v5.0.0 or higher requires a manual update. Please check here once and update it.

1. Vulnerability response

   • Supports cross-site scripting and SQL injection that occur on specific screens. Click here for details

2. Functional fix

   • Fixed so that even users who do not have login settings can reset with the password reset command.
   • In password (batch), fixed the return value of Plugin's execute function as the return value of the command.

3. Bug fix

   • Fixed a bug that the tooltip may protrude when displaying the month in the calendar view.
   • Fixed a bug that caused an error when displaying the details screen of parent data when many-to-many relation was performed and options (other tables) were set between the tables.