Hi,

We are currently using JCS 1.5.6. Do we need to upgrade to 1.5.9 to fix any vulnerability ?

As we customized JCS, we can't simply upgrade overwriting the files - Do you have a changelog to support a manual upgrade ?

Thanks,
Michel

Hello,

Please, note that on uninstall you can possible lose all information on subscription and subscribers.

You need to update following files

/administrator/components/com_jcs/jcs.function.php
/administrator/components/com_jcs/view/add.php
/administrator/components/com_jcs/view/history.php
/administrator/components/com_jcs/view/register.php
/administrator/components/com_jcs/views/list.sub.html.php
/administrator/components/com_jcs/views/list.user.sub.html.php
/administrator/components/com_jcs/views/reports.html.php

You can update or simple insert this line to every file:

<?php defined( '_VALID_MOS' ) or die( 'Restricted access' );?>

As the first line.

Unfortunately we do not have power right now to run update service for our clients.  Please, if you have no chances to update yourself contact us again and we will try to help you but if you do it yourself we very appreciate.

Thank you.

With regards to this modifying each of the mentioned files, I do not have a folder under the directory noted called "view", only "views".

I am running Version 1.5.6

Any ideas?

Hello,

I am sorry, in your case it seems needed to be prepared right upgrade from the patch. You can find this file in download section.

Thank you.