Version 10.0.37 has now been released. This version is a patch release that fixes two major security issues. Upgrading to this release is strongly advised due to security vulnerabilities.

To upgrade follow the steps in your website's http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached file (created via the form below) during step 3.



The following changes have been made since version 10.0.36…

• Image Filter Bypass Leads Remote Code Execution [Mass-add to gallery] [core] [*private issue*]
• Reflected Cross Site Scripting (XSS) [core] [*private issue*]
• "Allow audio as videos" option is misleading [galleries]