OS Events Booking Pro 5.8.1

[sarisan]

A new update for OS Events Booking Pro 5.8.1 is now available for free download. Big thanks to the contribution from our member @sarisan !

changelog

1. Missing permission check result in leaking data

- This missing permission check allow un-authenticated users to get data from any Joomla user (Name, Email) base on the given User ID. The necessary check has been added to prevent this.

2. Missing CSRF token check on upload file

- The extension has an end point to allow registrants to upload file during registrations using ajax upload. The code in previous release does not have CSRF token check, this is now added to enhance...

Read the rest of this update entry...