Security Advisory: WHMCS Stored XSS
This is a security release for WHMCS. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.
Etkilenen Sürümler
8.7.0 and earlier
Yamalanmış Sürüm
8.7.1
Varsayılan Güncelleme Komutu
yum update -y
Düzeltme Komutları
Any supported OS
cd /var/www/html
php composer.phar update whmcs/core
SharedLicense lisansı altında bunun anlamı
Your SharedLicense license itself is not affected — this is a change in WHMCS software, not in licensing. Apply it on every affected server: update to the fixed release from the WHMCS Admin Area. Licenses keep working through updates; nothing needs re-issuing or re-activating.
A stored cross-site scripting (XSS) vulnerability was found in the WHMCS admin panel, allowing an authenticated user to inject malicious scripts.
Referanslar
Sisteminizi güvenlik açıkları açısından kontrol edin
Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.
Sisteminizi Kontrol Edin