| 11700 |
Exporting/importing designs changes CGSimpleSmarty call in Navigator template |
2018-01-16 |
Minor |
|
None |
Open |
Nobody |
Dorothée DV |
| 11807 |
UserOperations::IsSuperuser() calls UserOperations::GetMemberGroups() incorrectly |
2018-05-01 |
Minor |
2.2.7 |
Fixed |
Open |
Nobody |
Chris |
| 11914 |
Bundled versions of smarty and PHPMailer contain security vulnerabilities |
2018-10-21 |
Minor |
2.2.8 |
Fixed |
Open |
Nobody |
Michael Orlitzky |
| 11955 |
admin panel output Mixed Content (HTTP and HTTPS) with custom variables in config.php file |
2019-01-24 |
Minor |
2.2.9 |
Fixed |
Open |
Robert Campbell |
Philippe Thomas |
| 11963 |
Pages tabindex do not output with navigator and some errors in online documentation |
2019-02-02 |
Minor |
2.2.9 |
None |
Open |
Robert Campbell |
Philippe Thomas |
| 12018 |
PHP 7.3 Warning - "continue" targeting switch is equivalent to "break" |
2019-04-06 |
Minor |
2.2.10 |
Fixed |
Open |
Nobody |
|
| 12019 |
JobManager delete_jobs_by_module bug |
2019-04-10 |
Minor |
2.2.10 |
Fixed |
Open |
Robert Campbell |
Chris Taylor |
| 12044 |
System Information "Do a Compilation Check" [yes] shows a wrong language string |
2019-05-21 |
Minor |
2.2.10 |
None |
Open |
Nobody |
Deleted User |
| 12048 |
The simple dropdown version of parent selector in the "Navigation" tab of "Edit Content Page" does not update the field |
2019-06-01 |
Minor |
2.2.10 |
None |
Open |
Nobody |
Sašo Živanović |
| 12094 |
Stored Cross-site Scripting Vulnerability in Settings-News module in CMS Made Simple |
2019-08-06 |
Minor |
2.2.10 |
None |
Open |
Nobody |
feioklucy |
| 12158 |
Navigator item prop has_children is always true when there is children |
2019-09-25 |
Minor |
2.2.10 |
Fixed |
Open |
Robert Campbell |
Tomas Amsrud |
| 12172 |
CronJobTrait undefined constants |
2019-10-18 |
Minor |
2.2.12 |
Fixed |
Open |
Robert Campbell |
Chris Taylor |
| 12391 |
Core search issue page/entry titles that start with numbers |
2020-12-03 |
Minor |
2.2.15 |
Accepted |
Open |
Nobody |
Greg Prosser |
| 12392 |
Stored Cross-Site Scripting - CMS Made Simple 2.2.15 |
2020-12-04 |
Minor |
2.1.5 |
Won't Fix |
Open |
Nobody |
Vu Tien Hoa |
| 12432 |
Reflected XSS in /admin/addbookmark.php |
2021-03-18 |
Minor |
2.2.15 |
Accepted |
Open |
CMS Made Simple Foundation |
Humberto Junior |
| 12437 |
Installer won't allow "<" symbol in database password |
2021-04-09 |
Minor |
2.2.15 |
Fixed |
Open |
Nobody |
Matt Hornsby (DIGI3) |
| 12456 |
Navigator breadcrumbs with default page hidden from menu causes php notice |
2021-05-25 |
Minor |
2.2.15 |
Fixed |
Open |
Ruud van der Velden |
Ruud van der Velden |
| 11077 |
If there's an error during user creation, the "copy settings" are not restored |
2016-07-05 |
Trivial |
2.1.4 |
None |
Open |
Nobody |
Mathieu Muths (airelibre) |
| 11421 |
Admin Log "Upgraded module FrontEndUsers to version" mistakenly displays version upgraded from. |
2017-06-22 |
Trivial |
2.2.1 |
None |
Open |
Nobody |
Tristan |
| 11568 |
OneEleven sets background color for input fields without setting text color |
2017-09-12 |
Trivial |
2.2.3.1 |
None |
Open |
Nobody |
Rimas Kudelis |
| 11880 |
content_image tag should accept empty value for alt parameter |
2018-08-30 |
Trivial |
2.2.8 |
Fixed |
Open |
Nobody |
Ruud van der Velden |
| 12001 |
Stored Cross-site Scripting in CMS Made Simple - File picker feature |
2019-03-24 |
Trivial |
2.2.10 |
None |
Open |
Nobody |
Chi Tran |
| 12003 |
Self-XSS vulnerability via My Account on CMSMS 2.2.10 |
2019-03-25 |
Trivial |
2.2.10 |
None |
Open |
Nobody |
Chi Tran |
| 12004 |
Stored Cross-site Scripting in Site Admin Settings - News module |
2019-03-25 |
Trivial |
2.2.10 |
None |
Open |
Nobody |
Chi Tran |
| 12022 |
Cross-site Scripting vulnerability in CMS Made Simple |
2019-04-19 |
Trivial |
2.2.10 |
Accepted |
Open |
Nobody |
Binit Ghimire |
