slackero/phpwcms v1.9.49

phpwcms v1.9.49

on GitHub

This legacy maintenance release contains critical security fixes, PHP 8+ compatibility improvements, and dependency updates targeting PHP 7.4+ compatible environments.

🔒 Security Fixes

• Stored XSS Prevention: Escaped subscriber email inputs in verify.php to prevent potential template-stored XSS vulnerabilities.
• Secure Version Checker: Refactored the system version check module to support secure HTTPS connections, explicit request timeouts, and robust HTTP status code verification.

🛠️ Compatibility & Bug Fixes

• PHP 8+ Notice Mitigation: Resolved PHP warnings by safely checking for the webp key in the USER_AGENT server array.

📦 Dependency Updates

• Vendor Libraries: Updated PHP 7.4-compatible vendor dependencies under include/vendor (including PhpSpreadsheet, CommonMark, and Symfony polyfills).