Zikula Core 2.0.13 released!

April 17, 2019


The core development team is proud to announce the availabilty of Zikula Core 2.0.13.

Zikula Core 2.0.13 is available as of today, 17 April, 2019.

  • Security fixes from Symfony:
    • Check service IDs are valid (CVE-2019-10910).
    • Fix XSS issues in the form theme of the PHP templating engine (CVE-2019-10909).
    • Prevent destructors with side-effects from being unserialized (CVE-2019-10912).
    • Add a separator in the remember me cookie hash (CVE-2019-10911).
    • Reject invalid method override (CVE-2019-10913).