The security issue requires the permission to edit categories, so it is even likely that no shop is affected. Only multivendor shops that allow category editing may be affected. This issue was found by Adam Wallwork.
A small feature has been added for the checkboxes of “tos” and similar. It is now possible to use an article id or alias in the "default" field to load a joomla article if custom userfield and layout "tos" is selected. It is also possible to set the text to the "description" field only. Very handy for additional contract terms.
We have replaced our old TcPdf library with the official updated version 6.8.2 of TcPdf. The versioning was taken from the library. So it looks like a high jump, but the library has no new features, but is better secured and adapted for PHP8.
We have opened a new discord server which is in general free for any community member. The forum shows the invite link, if you are at least in the "Jr. Member" group, which is the first after "Beginner". You are welcome to join us there.
DOWNLOAD VirtueMart 4.4.8
NOW with a membership
Enhancements
- Registration fields appear now at the end of the address data fields. This creates are more modern flow for one page checkouts.
- Fixed getInvoiceName to use set layout.
- Order edit, adding selection of tax for shipment/payment
- Added pagination for shipment/payment administration list
- Vendor view, added address fields to skip
Bugfixes
- Function mergeSessionSgrps added cast to array
- Table Media, added fields for convert to ints
- Cart added property cart to prevent dynamic adding
- Replaced shopFunctionsF::getInvoiceName against VirtueMartModelInvoice::getInvoiceName
- vmplugin, added unsetForDebug
- Added some cast to ints storing category xref table
- Guests are only registered if isset($_REQUEST['register'] is true (optin by design)
- Fixed deletion of positions in cart
- vmJsApi fixed popup function so that we can use different containers, but load the same lib
- Search module, removed wrong post data
DOWNLOAD VirtueMart 4.4.6
NOW without membership
