Download Latest Version
9.4.8 source code.tar.gz (40.3 MB)
Get an email when there's a new version of concretecms
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| concrete-cms-9.4.7-remote-updater.zip | 2025-12-02 | 77.4 MB | |
| concrete-cms-9.4.7.zip | 2025-12-02 | 76.8 MB | |
| 9.4.7 source code.tar.gz | 2025-12-02 | 40.3 MB | |
| 9.4.7 source code.zip | 2025-12-02 | 46.5 MB | |
| README.md | 2025-12-02 | 1.4 kB | |
| Totals: 5 Items | 241.0 MB | 0 | |
Behavioral Improvements
- YouTube block view now contains iframe code to help YouTube render better under certain stricter web server settings (thanks MarcoKuoni)
- We now define operation IDs for API endpoints (thanks hissy)
- On the Dashboard > Database Entities page we now show entities that are defined using PHP attributes (not just entities) (thanks mlocati)
Bug Fixes
- Fixed: Conversations file attachment icons and file attachment area are not formatted properly.
- Fixed: conversation loader shows properly.
- Fixed: The close “X” of Workflow pop-up only has Atomik css & doesn’t show up in other theme
- Fixed: Subscribe to Conversation "X" button does Unsubscribe/Subscribe button action
- Fixed incorrect edit profile validation on username.
- Fixed inability to rename a form block’s name through the block editing dialog once it has been added to the page.
- Fixed bug when regional jQuery UI languages did not load in time (thanks mlocati)
Developer Updates
- Updated dependencies to their latest minor versions.
Security Updates
- Patched Symfony Foundation libraries to resolve this security issue: https://symfony.com/blog/cve-2025-64500-incorrect-parsing-of-path-info-can-lead-to-limited-authorization-bypass
- Updated enshrined/svg-sanitized, which improves security scanning of SVG files (see https://www.cve.org/CVERecord?id=CVE-2025-55166).
