CubeCart V4.2.3 has today (12:57 PM GMT) been released. This latest release fixes over 60 reported bugs, patches the XSS vulnerability and adds a few extra payment modules. There have been a significant number of changes to core PHP files. As such, we strongly advise clients to avoid updating to the latest release before we publish compatible “Quick Upload” files and manual installation instructions for the Catalyst V4 skin. We will post again when we have tested and released the Catalyst V4 skin with V4.2.3.

A XSS (Cross-Site Scripting) vulnerability was detected in CubeCart V4.2.2 and may affect earlier versions.  The developers of CubeCart have released a fix.  It is advised that you apply this fix as soon as possible.  This fix will not affect any of our mods or skins.  Full details and instructions are available here.

An updated version of the Catalyst V4 CubeCart skin has been released.  This latest version corrects a number of reported issues:

Basket & customer details are not passed to the gateway
Missing details on “confirmed” page.
Multiple images may have wrong paths - Lightbox not working.
“Original Images” not scaled if dimensions are larger than browser window.
Textbox/Textarea product options […]

I received a wealth of feedback following the release of the Catalyst skin for CubeCart V4.  The feedback was all extremely positive.  I must thank all my clients for taking the time to forward your suggestions.  Whilst many of you appreciated the bundled mods, it is becoming clear that a proportion would rather not make […]