3.0.11#

Minor security release

Security#

• 2014-04-16 9d74bc4 Potential DoS exploit in TinyMCE - See announcement SS-2014-009
• 2014-05-05 9bfeffd Injection / Filesystem vulnerability in generatesecuretoken - See announcement SS-2014-010
• 2014-05-07 0099a18 Folder filename injection - See announcement SS-2014-011

Bugfixes#

• 2013-06-20 f2c4a62 ConfirmedPasswordField used to expose existing hash (Hamish Friedlander)

Changelog#

• framework
• cms
• installer