JCE Content Editor 2.6.33 bug fix released

joomla support cheshire manchester merseyside north west ukJCE 2.6.33 is a maintenance release addressing bugs reported since the last update.

Of special note, this release fixes this bug: PHP Error / blank page when accessing the JCE Control Panel in Joomla 3.9

View developer's Release Notes for more details - see link below.

Recent release, JCE 2.6.26, was a SECURITY FIX.

Always use the latest available release of any 3rd party extension.

Read on for more details about this latest release.

Read more: JCE Content Editor Release Notes.

Why was JCE 2.6.26 a SECURITY FIX?

The previous release, JCE 2.6.25, introduced support for SVG files as an IMAGE FILETYPE by default.

Here is the developer's explanation for why the security fix is necessary:

The decision to include support for svg files by default in JCE 2.6.25 was unfortunately not well thought through. It has been brought to my attention that there is the potential for svg files to be used to execute cross-site scripting attacks, due to the fact that they are essentially a form of xml file. Although the method by which they would be embedded using the Image Manager, with the tag, prevents scripts from being executed, it would be safer to restrict the option of allowing svg files to be user defined.

Read more: JCE 2.6.26 SECURITY FIX.

 

About JCE 2.6

JCE 2.6.0 marked a step change in the development of our favourite 3rd party content editor for the Joomla! CMS.

The launch of JCE 2.6.0 saw the developer offering Joomlers the option of either CORE or PRO versions of the extension.

CORE version remains free.

PRO version (yearly subscription) incorporates all the subscription plugins that were previously available for separate download from the developer's website.

Read more: JCE 2.6.0.

 

Reasons to upgrade to PRO

The image below nicely summarises the differences between CORE and PRO.

jce pro features

Visit the link below to find out about all the PRO features.

Subscribe: JCE PRO.

 

WYNCHCO Joomla! CMS Support

We coach, help and support managers with responsibility for Joomla! websites in organisations across Cheshire, Manchester, Merseyside, North West England & the UK.

Read more: WYNCHCO Joomla! CMS Support Packages.