Release v5.0.3, compatible with WP up to v6.7

readme.txt

@@ -3,7 +3,7 @@ Contributors: tinuzz
 Donate link: http://www.grendelman.net/wp/trackserver-wordpress-plugin/
 Tags: gps, gpx, map, leaflet, track, mobile, tracking
 Requires at least: 4.7
-Tested up to: 6.6
+Tested up to: 6.7
 Stable tag: trunk
 Requires PHP: 7.3
 License: GPLv2 or later
@@ -317,6 +317,13 @@ Changed:
 * Refactored the shortcode handling to make it more robust and maintainable.
 * Changed admin menu order and made 'Manage tracks' the primary page, rather than 'Options'.
 
+= v5.0.3 =
+Release date: 09 January 2025
+
+Fixed:
+* XSS in the 'tsmap' shortcode handler (CVE-2024-12505).
+* WordPress comptibility set to v6.7.
+
 = v5.0.2 =
 Release date: 05 March 2023
 

trackserver.php

@@ -5,14 +5,15 @@
 Plugin Script: trackserver.php
 Plugin URI: https://www.grendelman.net/wp/trackserver-wordpress-plugin/
 Description: GPS Track Server for TrackMe, OruxMaps and others
-Version: 5.0.2
+Version: 5.0.3
 Author: Martijn Grendelman
 Author URI: http://www.grendelman.net/
 Text Domain: trackserver
 Domain path: /lang
 License: GPL2
 
 === RELEASE HISTORY ===
+2025-01-09 - v5.0.3 - fix XSS in shortcode, reported by yudha @ Wordfence
 2023-03-05 - v5.0.2 - Bugfix
 2023-02-06 - v5.0  - new features, code refactoring, leaflet 1.9.3
 2019-09-10 - v4.3.1 - bugfix release