The latest version includes fixes for over 40 bugs, including 4 security updates with one being critical Core SQL Injection brought on by Inadequate escaping leads effects versions 3.1.0 through 3.2.2.The XSS brought on by Inadequate checking which allows unauthorised logins via GMail authentication effects versions 2.5.18 and earlier 2.5.x versions, 3.2.2 and earlier 3.x versions.Inadequate escaping leading to XSS vulnerability in com_contact effects versions 3.1.2 through 3.2.2 andInadequate escaping leading to XSS vulnerability effects versions 2.5.18 and earlier 2.5.x versions, 3.2.2 and earlier 3.x versions.Users are recommended to update their CMS to latest, updates are Availablehere
Read More
source: www.techworm.net
