7 May 2015
Coppermine version 1.5.36 is now available (security release).Upgrading to Coppermine 1.5.36
Coppermine 1.5.36 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Coppermine updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Coppermine install to test the 1.5.36 upgrade prior to applying it live. Get started managing your Coppermine installations with InstallatronWhat's New in Coppermine 1.5.36
This release covers a recently discovered XSS vulnerability that allows (if unpatched) a malevolent visitor to include own script routines under certain conditions. Furthermore, an open redirect issue and a directory enumeration issue have been fixed.
Additionally, cpg1.5.36 includes fixes for the following non-security related issues: