Composr Issue Tracker

Welcome to the issue tracker! Here, you can view reported software issues.

All users are encouraged to report software issues or suggestions to the tracker. You will be awarded points for each issue you report that gets completed by someone.

Developers are encouraged to go through the tracker and implement issues. You will receive points for issues you implement. Prioritise issues in the following order:
  • Security issues
  • Major issues
  • Minor issues
  • Trivial issues
  • Feature requests
    • Be aware this requires you create a measure for voting, and you achieve a simple majority, before implementing into core code. This is not necessary for non-bundled addons.

Please read our providing feedback tutorial page before reporting an issue.

Click here to view the full issue tracker catalogue.

Click here to report an issue or suggestion.


Open issues

Identifier Issue type Title Status Funded?
#5858 Trivial issue (does not break functionality) Using Shoutbox in Composr Causes Crash Open No View
#5857 Trivial issue (does not break functionality) Using Shoutbox in Composr Causes Crash Open No View
#5856 Trivial issue (does not break functionality) Using Shoutbox in Composr Causes Crash Open No View
#5855 Trivial issue (does not break functionality) Using Shoutbox in Composr Causes Crash Open No View
#6157 Minor issue (breaks specific functionality) CSS changes not reflected on website Open No View
#5848 Feature request or suggestion Increased consideration around SU feature Open No View
#5846 Feature request or suggestion Add performance testing to test set Open No View
#5845 Feature request or suggestion Convert PHP-based CSS calculations to native CSS Open No View
#5844 Feature request or suggestion Move to proper continuous integration pipeline Open No View
#5843 Feature request or suggestion Replace CQC with PHPStan+PHP-Code-Sniffer Open No View

Completed issues

Identifier Issue type Title Status Funded?
#3876 Security issue (exploit in Composr) XSS vulnerability via mime sniffing on .dat files Completed No View
#3887 Security issue (exploit in Composr) Information leak on IIS Completed No View
#4008 Security issue (exploit in Composr) Backups should be given reduced privileges Completed No View
#4076 Security issue (exploit in Composr) Security error in parameterised queries Completed No View
#4095 Security issue (exploit in Composr) Composr CMS 10.0.30 - (Authenticated) Cross-Site Scripting Completed No View
#4101 Security issue (exploit in Composr) Incorrect escaping of field labels (esp usergroup names) Completed No View
#4157 Security issue (exploit in Composr) XSS if showing topics via main_multi_content block Completed No View
#4202 Security issue (exploit in Composr) XSS hole in non-bundled image_slider addon Completed No View
#4391 Security issue (exploit in Composr) main_multi_content block not respecting validation Completed No View
#4632 Security issue (exploit in Composr) Image Filter Bypass Leads Remote Code Execution [Mass-add to gallery] Completed No View