ImpressCMS : Security Vulnerability Reported in CSSTidy
There has been a recent report of a potential vulnerability in the CSSTidy library included with ImpressCMS 1.2.0 and 1.2.1 releases.
The vulnerability exists in a file used as a implementation of the CSSTidy classes to demonstrates how the library functions. 1.2.0 et 1.2.1 de presse . La vulnérabilité existe dans un fichier utilisé comme une mise en œuvre des classes CSSTidy à déterminer comment les fonctions de la bibliothèque .
This file not used by ImpressCMS and can be removed from your sites.
In fact, it is recommended you remove the file. The file to remove is plugins/csstidy/css_optimiser.php. A patched version of ImpressCMS (version 1.2.2) will be released later today for new installations.
