Release notes

Table of contents

8.0.0-alpha.1

This is an alpha release. It is not intended for production use. Breaking changes are expected.

Overview

Masa CMS 8.0 is a major release focused on expanded engine support, security hardening, and removal of deprecated features. This alpha release marks the first milestone of the 8.0 series and adds support for Adobe ColdFusion 2025, Lucee 7, and BoxLang, alongside significant clean-up of legacy code.

New: Supported CFML Engines

Masa CMS 8.0 expands the list of supported CFML engines:

  • Adobe ColdFusion 2025 — now officially supported
  • Lucee 7 — now officially supported
  • BoxLang — now officially supported

BoxLang Compatibility

Masa CMS 8.0 introduces broad compatibility with BoxLang. Extensive changes have been made across the codebase to ensure Masa CMS runs correctly on the BoxLang engine.

Database creation is not supported in the BoxLang installation wizard. When installing Masa CMS on BoxLang, the database must be created manually before running the setup.

Security Improvements

  • BCrypt log rounds increased from 10 to 12 for stronger password hashing
  • Encryption default changed to SHA-256 — the default hash algorithm is now SHA-256 (previously MD5)
  • All passwords are now hashed with BCrypt — the encryptPasswords Java-enabled setting has been removed; BCrypt is always used
  • CSRF token generation hardened

Dropped Engine Support

Masa CMS 8.0 drops support for older CFML engines. Please upgrade your engine before migrating to 8.0.

The following CFML engines are no longer supported as of 8.0:

  • Adobe ColdFusion 2021 and earlier — Adobe ColdFusion 2023 or 2025 is required
  • Lucee 5.4 and earlier — Lucee 6 or 7 is required

Breaking Changes & Removals

The following features and settings have been removed in 8.0:

  • Legacy Sessions removed — the UseLegacySessions setting has been removed. This was deprecated in 7.5. Only modern session management is supported going forward.
  • AWS S3 ACL support removed — the storeSetACL setting and S3 ACL handling have been removed from application settings.
  • Razuna integration removed — the Razuna file manager integration and its CKEditor plugin have been fully removed.
  • Non-BCrypt password functionality removed — the bCryptPassword setting and the Java-enabled encryptPasswords option have been removed. BCrypt is now the only supported password hashing method.
  • Unsupported locales removed
  • Outdated Docker setup files removed

Testing

  • TestBox dependency updated to version 6.5.0
  • Test runner (runner.cfm) enhanced with detailed coverage options
  • New unit tests added for utility.cfc date helper functions
  • contentIntervals.cfc test coverage significantly expanded (including alignToWeekday and GetNthDayOfMonth)
  • Unit tests added for blockfactor validation

Full Changelog: 7.5.4…8.0.0-alpha.1

7.5.4

What’s Changed

Full Changelog: 7.5.3…7.5.4

7.4.11

What’s Changed

Full Changelog: 7.4.11…7.4.10

7.3.16

What’s Changed

Full Changelog: 7.3.16…7.3.15

7.2.11

What’s Changed

Full Changelog: 7.2.11…7.2.10

7.5.3

Security Vulnerability Fix

What was the issue ?

We’ve been informed multiple critical, high and moderate vulnerabilities in Masa CMS.

What is fixed ?

The mentioned vulnerabilities have been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3, 7.4 and 7.5 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.5, you should update to version 7.5.3 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.4, you should update to version 7.4.10 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.15 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.10 immediately. This can be done by applying a manual update.

If an immediate upgrade is not possible, review the workarounds in the security advisories.

What’s Changed

  • Npm audit fixes
  • CSRF improvements
  • SQL injection protection improvements
  • Redirect improvements

Full Changelog: 7.5.2…7.5.3

7.4.10

Security Vulnerability Fix

What was the issue ?

We’ve been informed multiple critical, high and moderate vulnerabilities in Masa CMS.

What is fixed ?

The mentioned vulnerabilities have been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3, 7.4 and 7.5 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.5, you should update to version 7.5.3 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.4, you should update to version 7.4.10 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.15 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.10 immediately. This can be done by applying a manual update.

If an immediate upgrade is not possible, review the workarounds in the security advisories.

What’s Changed

  • CSRF improvements
  • SQL injection protection improvements
  • Redirect improvements

Full Changelog: 7.4.9…7.4.10

7.3.15

Security Vulnerability Fix

What was the issue ?

We’ve been informed multiple critical, high and moderate vulnerabilities in Masa CMS.

What is fixed ?

The mentioned vulnerabilities have been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3, 7.4 and 7.5 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.5, you should update to version 7.5.3 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.4, you should update to version 7.4.10 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.15 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.10 immediately. This can be done by applying a manual update.

If an immediate upgrade is not possible, review the workarounds in the security advisories.

What’s Changed

  • CSRF improvements
  • SQL injection protection improvements
  • Redirect improvements

Full Changelog: 7.3.14…7.3.15

7.2.10

Security Vulnerability Fix

What was the issue ?

We’ve been informed multiple critical, high and moderate vulnerabilities in Masa CMS.

What is fixed ?

The mentioned vulnerabilities have been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3, 7.4 and 7.5 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.5, you should update to version 7.5.3 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.4, you should update to version 7.4.10 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.15 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.10 immediately. This can be done by applying a manual update.

If an immediate upgrade is not possible, review the workarounds in the security advisories.

What’s Changed

  • CSRF improvements
  • SQL injection protection improvements
  • Redirect improvements

Full Changelog: 7.2.9…7.2.10

7.5.2

Security Vulnerability Fix

What was the issue ?

We’ve been informed about a high vulnerability in Masa CMS.

What is fixed ?

The mentioned vulnerability has been fixed. A few bugs are fixed as well

What versions are affected?

Masa CMS versions 7.2, 7.3, 7.4 and 7.5 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.5, you should update to version 7.5.2 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.4, you should update to version 7.4.9 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.14 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.9 immediately. This can be done by applying a manual update.

What’s Changed

New Contributors

Full Changelog: 7.5.1…7.5.2

7.4.9

Security Vulnerability Fix

What was the issue ?

We’ve been informed about a high vulnerability in Masa CMS.

What is fixed ?

The mentioned vulnerability has been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3, 7.4 and 7.5 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.5, you should update to version 7.5.2 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.4, you should update to version 7.4.9 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.14 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.9 immediately. This can be done by applying a manual update.

Full Changelog: 7.4.8…7.4.9

7.3.14

Security Vulnerability Fix

What was the issue ?

We’ve been informed about a high vulnerability in Masa CMS.

What is fixed ?

The mentioned vulnerability has been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3, 7.4 and 7.5 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.5, you should update to version 7.5.2 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.4, you should update to version 7.4.9 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.14 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.9 immediately. This can be done by applying a manual update.

Full Changelog: 7.3.13..7.3.14

7.2.9

Security Vulnerability Fix

What was the issue ?

We’ve been informed about a high vulnerability in Masa CMS.

What is fixed ?

The mentioned vulnerability has been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3, 7.4 and 7.5 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.5, you should update to version 7.5.2 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.4, you should update to version 7.4.9 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.14 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.9 immediately. This can be done by applying a manual update.

Full Changelog: 7.2.8…7.2.9

7.5.1

What’s Changed

New Contributors

Full Changelog: 7.5.0…7.5.1

7.5.0

What’s Changed

New Contributors

Full Changelog: 7.4.8…7.5.0

7.4.8

What’s Changed

New Contributors

Full Changelog: 7.4.7…7.4.8

7.4.7

What’s Changed

New Contributors

Full Changelog: 7.4.6…7.4.7

7.4.6

Security Vulnerability Fix

What was the issue ?

We’ve been informed about multiple high and critical vulnerabilities in Masa CMS.

What is fixed ?

  • The mentioned vulnerabilities have been fixed.
  • Additional security improvements have been made.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.4, you should update to version 7.4.6 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.13 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.8 immediately. This can be done by applying a manual update.

What’s Changed

  • Sections can act as fieldsets by @grantshepert
  • Disable enableMuraTag, enableDynamicContent and sharableRemoteSessions by default
  • Additional security improvements have been made

Full Changelog: 7.4.5…7.4.6

7.3.13

Security Vulnerability Fix

What was the issue ?

We’ve been informed about multiple high and critical vulnerabilities in Masa CMS.

What is fixed ?

  • The mentioned vulnerabilities have been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.4, you should update to version 7.4.6 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.13 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.8 immediately. This can be done by applying a manual update.

What’s Changed

  • Disable enableMuraTag, enableDynamicContent and sharableRemoteSessions by default
  • Additional security improvements have been made

Full Changelog: 7.3.12…7.3.13

7.2.8

Security Vulnerability Fix

What was the issue ?

We’ve been informed about multiple high and critical vulnerabilities in Masa CMS.

What is fixed ?

  • The mentioned vulnerabilities have been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.4, you should update to version 7.4.6 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.13 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.8 immediately. This can be done by applying a manual update.

What’s Changed

  • Disable enableMuraTag, enableDynamicContent and sharableRemoteSessions by default
  • Additional security improvements have been made

Full Changelog: 7.2.7…7.2.8

7.4.5

Security Vulnerability Fix

What was the issue ?

We’ve been informed about a critical vulnerability in Masa CMS.

What is fixed ?

  • The mentioned vulnerability has been fixed.
  • Additional security improvements have been made.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.4, you should update to version 7.4.5 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.12 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.7 immediately. This can be done by applying a manual update.

What’s Changed

New Contributors

Full Changelog: 7.4.4…7.4.5

7.3.12

Security Vulnerability Fix

What was the issue ?

We’ve been informed about a critical vulnerability in Masa CMS.

What is fixed ?

  • The mentioned vulnerability has been fixed.
  • Additional security improvements have been made.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.4, you should update to version 7.4.5 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.12 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.7 immediately. This can be done by applying a manual update.

Full Changelog: 7.3.11…7.3.12

7.2.7

Security Vulnerability Fix

What was the issue ?

We’ve been informed about a critical vulnerability in Masa CMS.

What is fixed ?

  • The mentioned vulnerability has been fixed.
  • Additional security improvements have been made.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.4, you should update to version 7.4.5 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.12 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.7 immediately. This can be done by applying a manual update.

Full Changelog: 7.2.6…7.2.7

7.4.4

What’s Changed

New Contributors

Full Changelog: 7.4.3…7.4.4

7.4.3

What’s Changed

New Contributors

Full Changelog: 7.4.2…7.4.3

7.4.2

Security Vulnerability Fix

What was the issue ?

We’ve been informed of multiple vulnerabilities in Masa CMS.

What is fixed ?

  • The mentioned vulnerabilities have been fixed.
  • Security fixes from the MuraLabs repository have been copied over to Masa CMS.
  • Multiple dependancies have been updated to their latest releases.
  • Unused dependancies have been removed.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.4, you should update to version 7.4.2 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.11 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.6 immediately. This can be done by applying a manual update.

Full Changelog: 7.4.1…7.4.2

7.3.11

Security Vulnerability Fix

What was the issue ?

We’ve been informed of multiple vulnerabilities in Masa CMS.

What is fixed ?

  • The mentioned vulnerabilities have been fixed.
  • Security fixes from the MuraLabs repository have been copied over to Masa CMS.
  • Multiple dependancies have been updated to their latest releases.
  • Unused dependancies have been removed.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.4, you should update to version 7.4.2 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.11 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.6 immediately. This can be done by applying a manual update.

Full Changelog: 7.3.10…7.3.11

7.2.6

Security Vulnerability Fix

What was the issue ?

We’ve been informed of multiple vulnerabilities in Masa CMS.

What is fixed ?

  • The mentioned vulnerabilities have been fixed.
  • Security fixes from the MuraLabs repository have been copied over to Masa CMS.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4 are affected.

What should you upgrade ?

  • If you’re on Masa CMS 7.4, you should update to version 7.4.2 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.
  • If you’re on Masa CMS 7.3, you should update to version 7.3.11 immediately. This can be done by applying a manual update.
  • If you’re on Masa CMS 7.2, you should update to version 7.2.6 immediately. This can be done by applying a manual update.

Full Changelog: 7.2.5…7.2.6

7.4.1

What’s Changed

  • fix issue with ids in db update script by @guustnieuwenhuis in #157
  • Replace hard-coded references to /admin directory by @jimblesphere in #177
  • Update filebrowser.cfc by @chexy in #175
  • error when related content is scheduled, missing column parentType by @sejourla in #174
  • Update database driver created by setup for MySQL/Lucee by @quetwo in #141
  • fixed broken styling on categories tab
  • fixed broken styling on component editing (front-end)
  • fixed StructKeyDelete function by @ejespersen-AMS
  • fixed class extensions in components

Full Changelog: 7.4.0…7.4.1

7.4.0

What’s Changed

  • updated default theme to the latest version
  • updated mura.js to the latest version
  • new setting showextensionsindefault to show the basic tab extended attributes below the editor
  • new search module
  • new primarynav module
  • new gotofirstchild module
  • new nextprevnav module
  • new gattedasset module
  • new button module
  • new info module
  • new media module
  • reviewed navigation module
  • reviewed form module
  • reviewed image module
  • reviewed CTA module

7.4.0-beta.3

7.3.10

Security Vulnerability Fix

What was the issue ?

We’ve been informed of an authentication bypass vulnerability in Masa CMS.

What is fixed ?

The mentioned vulnerability has been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4-beta are affected.

What should you upgrade ?

If you’re on Masa CMS 7.3, you should update to version 7.3.10 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.

7.2.5

Security Vulnerability Fix

What was the issue ?

We’ve been informed of an authentication bypass vulnerability in Masa CMS.

What is fixed ?

The mentioned vulnerability has been fixed.

What versions are affected?

Masa CMS versions 7.2, 7.3 and 7.4-beta are affected.

What should you upgrade ?

If you’re on Masa CMS 7.2, you should update to version 7.2.5 immediately. This can be done by applying a manual update.

7.3.9

What’s Changed

  • Update filebrowser.cfc by @jimblesphere in #128
  • fix empty admin minified JS files
  • replace We Are Orange with We Are North (https://www.wearenorth.eu/updates/we-are-north-now-not-orange-heres-why/)

Full Changelog: 7.3.8…7.3.9

7.4.0-beta.2

fixed an issue with empty generated javascript files

7.4.0-beta.1

This is a pre-release version of 7.4 including the follow updates:

  • update for the default theme
  • new setting showextensionsindefault to show the basic tab extended attributes below the editor
  • new search module
  • new primarynav module
  • new gotofirstchild module
  • new nextprevnav module

7.3.8

Bug fixes for:

and CKEditor update to version 4.19.1

7.4.0-alpha.2

This is a pre-release version of 7.4 including the follow updates:

  • new Gatted Asset module
  • reviewed Navigation module

7.3.7

Security Vulnerability Fix

What was the issue ?

We’ve been informed of a path traversal vulnerability in Masa CMS CVE-2021-42183.

What is fixed ?

The mentioned vulnerability has been fixed.

What versions are affected?

Masa CMS versions 7.2 and 7.3 are affected.

What should you upgrade ?

If you’re on Masa CMS 7.2, you should update to version 7.2.4 immediately. This can be done by applying a manual update.

7.2.4

Security Vulnerability Fix

What was the issue ?

We’ve been informed of a path traversal vulnerability in Masa CMS CVE-2021-42183.

What is fixed ?

The mentioned vulnerability has been fixed.

What versions are affected?

Masa CMS versions 7.2 and 7.3 are affected.

What should you upgrade ?

If you’re on Masa CMS 7.2, you should update to version 7.2.4 immediately. This can be done by applying a manual update.

7.3.6

Security Vulnerability Fix

What was the issue ?

We’ve been informed of a XSS security vulnerability in the Masa CMS administrator.

What is fixed ?

Additional protection against XSS attacks is implemented to further secure the Masa CMS administrator.

What versions are affected?

Masa CMS versions 7.2 and 7.3 are affected.

What should you upgrade ?

If you’re on Masa CMS 7.2, you should update to version 7.2.3 immediately. This can be done by applying a manual update.

7.2.3

Security Vulnerability Fix

What was the issue ?

We’ve been informed of a XSS security vulnerability in the Masa CMS administrator.

What is fixed ?

Additional protection against XSS attacks is implemented to further secure the Masa CMS administrator.

What versions are affected?

Masa CMS versions 7.2 and 7.3 are affected.

What should you upgrade ?

If you’re on Masa CMS 7.2, you should update to version 7.2.3 immediately. This can be done by applying a manual update.

7.4.0-alpha.1

This is a pre-release version of 7.4 including the follow updates:

  • updated mura.js to the latest version
  • new Button module
  • new Info module
  • new Media module
  • reviewed Form module
  • reviewed Image module
  • reviewed CTA module

7.3.5

Bug fixes

  • bug fixes for
    • issue 74
    • fixes for integration with s3 in File Browser

7.3.4

Security Vulnerability Fix

What was the issue ?

We’ve been informed of a XSS security vulnerability in the Masa CMS administrator.

What is fixed ?

Additional protection against XSS attacks is implemented to further secure the Masa CMS administrator.

What versions are affected?

Masa CMS versions 7.2 and 7.3 are affected.

What should you upgrade ?

If you’re on Masa CMS 7.3, you should update to version 7.3.4 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.

7.3.3

Bug fixes

  • bug fixes for
    • issue 75
    • JS error when publishing a page with an undefined canonicalurl
    • JS error when starting inline editing

7.3.2

Bug fixes

7.3.1

Bug fixes

7.3

New features

Bug fixes

  • Old, unused code from Advertisement Manager removed from codebase
  • Fixed a tenacious JavaScript console error
  • ORM Scaffolder option list and option values list were incorrectly displayed

Deprecations

7.2.2

Security Vulnerability Fix

What was the issue ?

We’ve been informed of a XSS security vulnerability in the Masa CMS administrator.

What is fixed ?

Additional protection against XSS attacks is implemented to further secure the Masa CMS administrator.

What versions are affected?

Masa CMS versions 7.2 and 7.3 are affected.

What should you upgrade ?

If you’re on Masa CMS 7.3, you should update to version 7.3.4 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.

7.2.1

Security Vulnerability Fix

What was the issue ?

We’ve been informed of a security vulnerability that allows any user to request files outside the asset folder from the server.

What is fixed ?

We’ve improved the security around the assets API endpoint that is affected, to validate that the user can only request assets from the assets folder. In the process we’ve also applied restrictions to the asset upload endpoint, so that only logged in editors can upload assets.

What versions are affected?

Only Masa CMS version 7.2 is affected

What should you upgrade ?

If you’re on Masa CMS 7.2, you should update to version 7.2.1 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update.

7.2

Mura CMS becomes Masa CMS

  • Renamed Mura CMS to Masa CMS
  • Replaced Mura CMS logo’s with Masa CMS logo’s
  • Removed Mura CMS contributor agreement
  • Removed obsolete Docker config
  • Removed CKFinder license
  • Bugfixes

New features

  • Setting for enabling/disabling File Manager, disabled by default
  • New image upload in CKEditor, without using CKFinder