Steve Kenow

The ImpressCMS team is proud to present a release candidate (RC) for ImpressCMS 1.3.3. 

Major changes in 1.3.3

Password encryption

This release has a major change in password encryption methods and also to some authentication methods.  When you upgrade an existing site with 1.3.3, all the current passwords will be expired and users will need to reset their passwords upon their next login.

New version of ImpressCMS improves speed, memory use and efficiency, while laying the groundwork for features communities need for their online applications. 

The ImpressCMS team is very proud to announce the release of ImpressCMS 1.3 - smaller, faster and better! ImpressCMS enables communities to easily build websites around many different areas of interest and functions. 

The goals defined for the newest version of ImpressCMS were clear: completely overhaul the core to improve speed, improve efficiency and improve the architecture, while still maintaining the functionality of existing sites, modules and themes.

Two security vulnerabilities were just discovered and a new release has been published to address them. The ImpressCMS Project has just released ImpressCMS 1.2.4 as a stable release - site administrators are strongly encouraged to upgrade their sites.

The imagemanager plugin used by the TinyMCE wysiwyg editor was bypassing the permissions system, allowing unauthorized creation of categories and folders within the image folder. The second vulnerability was a potential cross-site scripting, but required elevated permissions and access to the administration area of ImpressCMS.