LimeSurvey 6.3.1
23 October 2023
LimeSurvey version 6.3.1 is now available (major release).
Upgrading to LimeSurvey 6.3.1
LimeSurvey 6.3.1 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply LimeSurvey updates as new versions are released, or use Installatron's Clone feature to duplicate an existing LimeSurvey install to test the 6.3.1 upgrade prior to applying it live. Get started managing your LimeSurvey installations with Installatron
What's New in LimeSurvey 6.3.1
6.3.1
Security
- #19114: [security] Admin with Settings & Plugins permission only can store XSS in Survey menus (#3542) (Gabriel Jenik)
Bug Fixes
- Failed emails resend vars column needs to be mediumtext for mysql (#3545) (Tim Willig)
- Adding cldr "fr_lu" for lb language (twilligls)
- Upgrade fails on old fruity templates with error message 'cannot assign property fixnum to null' (Carsten Schmitz)
- Survey sometimes not completely deactivated, throwing error for missing response table (Carsten Schmitz)
- Core plugins AzureOAuthSMTP & GoogleOAuthSMTP not properly listed as core plugins (Carsten Schmitz)
- #CT-386: missing closing div caused blank page on simple statistics for questions with more than 70 labels (twilligls)
- #CT-256: Problems with ini parsing for GTranslate.php (#3555) (Tim Willig)
- #19180: SMTP settings are not enabled when SMTP is selected in global settings (#3551) (Matthew)
- #19170: Inserting a subquestion/answer option creates multiple rows (#3535) (Matthew)
6.3.0
Security
- #19146: [security] Store XSS when editing label set (#3505) (Denis Chenu)
- #19142: [security] CSRF in Save Box Settings (#3516) (Gabriel Jenik)
- #19106: [security] Deleted account still has permissions (#3493) (Denis Chenu)
- #19094: [security] Input Validation Vulnerability Leading to 500 on responses page (#3520) (Denis Chenu)
- #19038: [security] Privilege escalation bug to creation survey-group with others group as parent (#3423) (Gabriel Jenik)
New Features
- #15664: Google OAuth plugin for emails (#3054) (Gabriel Jenik)
Bug Fixes
- CR-1355: Image question types were gone on fresh install (#3518) (Tim Willig)
- #18776: Question ordering not correct (#3522) (Matthew)
- #18648: Unable to upload a file with theme animations enabled (#3529) (Gabriel Jenik)
- #18439: Link set when create user are unusuable in text view (#3510) (Gabriel Jenik)
- #18193: Question theme error - Missing metadata (Type: X) (#3252) (Denis Chenu)