Hello folks.

This is a security release of your favorite flexible, powerful, and proactive content management system. The CMSMS Dev team considers security issues to be a top priority, and tries to fix security vulnerabilities as soon as possible. Therefore, we are releasing CMSMS 1.11.7. All users should upgrade as soon as possible. Please see the upgrade instructions at http://docs.cmsmadesimple.org/upgrading. As always, the latest release can be found at: http://www.cmsmadesimple.org/downloads/

We would like to thank the people at leakfree.nl who found these issues and worked with us to ensure that they were resolved.

In addition, we have added a feature that will allow you to have your CMSMS install on any server in any timezone and allow you to enter and display times and dates in a timezone of your choosing. The new config.php entry 'set_db_timezone' (which defaults to OFF) will send another query to the MySQL server so that it does date comparisons while considering your desired timezone. This should solve the problem of having to enter news, blog, and calendar entries in times that are in the server's timezone.

As we have not changed the database schema at all, there are diff releases available from CMSMS 1.11.5 and 1.11.6. As of this release the currently supported versions of CMSMS are 1.11.6 and 1.11.7.

Thank you for your time, and enjoy using CMSMS.