Nucleus v3.22 Released

We have released Nucleus v3.22. This is a bugfix release which mainly serves as a fix for the recently discovered security issue in the PHP XML-RPC library that is used by Nucleus. Next to this fix, a number of bugfixes for problems reported in v3.2 are also included.

• Changelog
• Upgrade to Nucleus CMS v3.22
• Download Nucleus CMS v3.22
• Try the Nucleus CMS v3.22 demo
• Nucleus support forum

Another XML-RPC security issue

After a vulnerability was discovered in our bundled XML-RPC library earlier this year, the Hardened-PHP project did a code audit and found another security issue. They worked together with the library authors to solve the issue.

We'll be wrapping the fixed library files together with some other bugfixes into a Nucleus v3.22 release later this week. For now, a temporary fix is available:

1. Download this file: nucleus-xmlrpc-patch.zip
2. Extract both the files (xmlrpc.inc.php and xmlrpcs.inc.php) into your /nucleus/libs folder.