Advanced Forms for ACF v1.9.3.8

Decryption key:

To view the content, you need to Sign In or Register.

Advanced Forms for ACF v1.9.3.8
== Changelog ==

= 1.9.3.8 =
* Security: Fixed a missing authorization check on the form import handler. An unauthenticated request to `admin-post.php` could overwrite an existing form (identified by its publicly visible form key) and inject stored cross-site scripting via the form description — potentially leading to site takeover. The import handler now requires the `edit_pages` capability and a valid nonce, and rejects malformed uploads. Thanks to Jakub Herman / Patchstack for the responsible disclosure.
* Security: Form titles and descriptions are now sanitised on output (`esc_html()` for the title, `wp_kses_post()` for the description).
* Fixed a PHP warning ("Trying to access array offset on value of type null") when saving a form.

Decryption key:

To view the content, you need to Sign In or Register.

Advanced Forms for ACF v1.9.3.7
== Changelog ==

= 1.9.3.7 =

* Added copy-to-clipboard button for the shortcode field on the form edit screen.

*Pro*

* Fixed issue where HTML in integration field labels was escaped by ACF 6.7+.