UliCMS 2020.2 includes a lot of new features and improvements. This release is suited for new users and as upgrade for existing projects.

A stored cross-site-scripting security issue in the save page feature was reported by Ngo Van Thien, Sun* Inc.

The issue affects all UliCMS Versions.
The security hotfix FixPageControllerXSS was released for UliCMS 2019.4 and 2020.1.
If you still use an older release of UliCMS you should upgrade to a supported version and then install the patch.

The upcoming release 2020.2 will include the fix at release state.

A cross-site-scripting security issue in the uninstall package feature was reported by Ngo Van Thien, Sun* Inc.

Since this vulnerability requires a user to be authenticated this is only a low impact security issue for most sites.

The issue affects UliCMS Version 2018.4 to 2020.1.
The security hotfix FixPackageControllerXSS was released for UliCMS 2019.4 to 2020.1.
If you still use an older release of UliCMS you should upgrade to a supported version and then install the patch.

Version 2020.2 will include the fix at release state.

UliCMS 2020.1 offers a large amount of new features for designing your website project.

[...]

Update 1 is an bugfix only update for UliCMS 2019.4, that fixes some bugs related to the change of the API to static types. Also there got also two bugs in the installation procedure fixed.

The update has no new features since UliCMS 2019.4.

[...]