Security Advisory – Cross-site scripting vulnerabilities
Cross-site scripting advisory for Blesta 3.0.0 through 3.0.3: two message types render without sanitization. Both issues are fixed in the 3.0.4 patch.
Blog · publishing since 2008
Release announcements, version previews, security advisories, and the occasional detour — written by the team building Blesta.
Cross-site scripting advisory for Blesta 3.0.0 through 3.0.3: two message types render without sanitization. Both issues are fixed in the 3.0.4 patch.
ModulesGarden releases cPanel Extended for Blesta, letting clients manage FTP, email, databases, subdomains, addon domains, and cron jobs from the Blesta client area.
Blesta v3 final ships August 14th, ending the $99 promo. New pricing spans owned licenses from $250 to a $500 lifetime option, monthly plans, and $95 addon companies.
Blesta v3 beta 1 is released. Paid license holders can request a beta key via account.blesta.com, or buy v2.5 for the $99 promo price to join the beta.
30-day free trial · No credit card · Your server
Everything on this blog ships in the box. Full product, free for 30 days, on your own server.