This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:
No other fixes are included.
jQuery UI Datepicker - Moderately critical - Cross Site Scripting - SA-CONTRIB-2022-004.
Fixes Anti Spam by CleanTalk - Moderately critical - SQL Injection - SA-CONTRIB-2022-032
Resolves SA-CONTRIB-2022-003.
Please update your editor libraries to the latest stable releases and check the list of supported editor versions for additional notes.
This module enables users to login via email address.
This module does not sufficiently check user status when authenticating.
Super Login - Critical - Access bypass - SA-CONTRIB-2022-048.
Solution: Install the latest version