Publicat
2024-06-19 18:32
There has been a security release for CiviCRM. Upgrades are available for:
- CiviCRM v5.74.4 (download, release notes)
- CiviCRM v5.69.6 ESR (info, download, release notes)
These upgrades address the following security issue:
- CIVI-SA-2024-01: View Contact (Cross Site Scripting)
- CIVI-SA-2024-02: JSON Settings (Cross Site Scripting)
- CIVI-SA-2024-03: Smarty Security Policy (Arbitrary PHP Code Execution)
Support CiviCRM
We are committed to keeping CiviCRM free and open, forever. We depend on your support to help make that happen.
- Make a donation or contribute to a Make it happen campaign.
- If your organization wants to support our work, please become a member today.
- If you are a CiviCRM service provider, please become a partner.
CiviCRM is community driven and is sustained through contributions, good vibes, solidarity, and financial support from its community. Help CiviCRM do a world of good.
