10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-11 10:46:11 +09:00
Code Issues Packages Projects Releases Wiki Activity

Fix: Address CVE-2025-13217 and improve input sanitization

Browse Source 
Resolved CVE-2025-13217 by implementing proper input sanitization and escaping for iframe URLs in YouTube, Vimeo, and Google Maps embeds. This update ensures safer handling of user-provided links to mitigate potential security vulnerabilities.
This commit is contained in:
Mykyta Synelnikov
2025-12-05 17:56:45 +02:00
parent b75a2145dd
commit 302731f252
3 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changelog.txt
+1 -1
View File
@@ -2,7 +2,7 @@
= 2.11.1 December xx, 2025 =
Fixed: CVE-2025-13217
= 2.11.0 December 02, 2025 =