Drupal 8.5.2
20 April 2018
Drupal version 8.5.2 is now available (security release).
Upgrading to Drupal 8.5.2
Drupal 8.5.2 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Drupal updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Drupal install to test the 8.5.2 upgrade prior to applying it live. Get started managing your Drupal installations with Installatron
What's New in Drupal 8.5.2
Security
- Drupal core - Moderately Critical - Cross Site Scripting - SA-CORE-2018-003 - CKEditor, a third-party JavaScript library included in Drupal core, has fixed a cross-site scripting (XSS) vulnerability. The vulnerability stemmed from the fact that it was possible to execute XSS inside CKEditor when using the image2 plugin (which Drupal 8 core also uses).