• News

Details

This update fixes two issues that have been reported, following changes that were made in 2.6.27 to Captions and the addition of a JCE File Browser Media Field.

In addition, a few new vintage filters have been added to the Image Editor, for all you retro photo fans out there!

Details

This is a security release.

The decision to include support for svg files by default in JCE 2.6.25 was unfortunately not well thought through. It has been brought to my attention that there is the potential for svg files to be used to execute cross-site scripting attacks, due to the fact that they are essentially a form of xml file. Although the method by which they would be embedded using the Image Manager, with the <img> tag, prevents scripts from being executed, it would be safer to restrict the option of allowing svg files to be user defined.

Thank you to David Jardin for notifying me of this issue. If you find any more issues please submit them on the forum or on github.

Download and Installation

JCE Pro is available for download with a JCE Pro Subscription.
If you already have a subscription, please make sure you set your key before updating to JCE Pro 2.6.26

Instructions for installing and updating JCE for each Joomla version are available here

Details

This update fixes a few bugs reported since the last update. In addition, support has been added for svg files as an image filetype.

Thank you to everyone who submitted bug reports. If you find any more issues please submit them on the forum or on github.

Download and Installation

JCE Pro is available for download with a JCE Pro Subscription.
If you already have a subscription, please make sure you set your key before updating to JCE Pro 2.6.25

Instructions for installing and updating JCE for each Joomla version are available here

More Articles ...