Security concern

[Nidzo]

In light of the security flaws that have hit known Joomla components such as JCE editor, SP Page Builder, Helix framework, Balboa forms, jCagenda, etc. is there a fear of a security breach in the Phoca components since the security breaches were related to the upload option and Ajax?

[Jan]

Hi, there are currently no known security risks. But it's always difficult with security risks because we only learn about them when someone discovers them. In general, Phoca extensions are made to prevent security problems (for example, some parts are often checked multiple times).

Jan

[Nidzo]

Good to hear that

[Jan]

BTW, speaking of which, today I received a report about a possible issue in Phoca Download, which was immediately fixed and a security release was issued: https://github.com/PhocaCz/PhocaDownloa ... /tag/6.1.3