Interchange News

• Marco Pessotto joins Interchange core developer team

  Posted on 26-Aug-2020

  We are happy to announce that Marco Pessotto recently joined the Interchange core developer team! Marco’s involvement with Interchange dates back to 2013 or earlier. He has contributed several core code commits and worked on many Interchange stores. You can find Marco also involved at his web home o... [more]

• Admin XSS security vulnerabilities fixed (CVE-2020-12685)

  Posted on 14-May-2020

  The Interchange admin in versions 4.7.0 through 5.11.x (before 2020-05-15) was vulnerable to cross-site scripting (XSS) injection attacks in the help and quicklinks pages. Attackers could use browser JavaScript to steal client-side credentials such as a session cookie or delivered page data. The att... [more]

See earlier news about Interchange.