Vulnerability in EPiServer.Forms

Try our conversational search powered by Generative AI!

Episerver - update 152

New releases of A/B Testing and Episerver Forms Service API. Bug fixes for Episerver CMS Core and UI. Updates to the third-party add-on Avensia StoreFront have been released as well.

The update applies to Episerver projects version 7.5 and higher, and contains finalized work items included in the latest iteration. Continuous release updates are cumulative to include previous updates. Episerver supports all platform updates and strongly recommends that you keep ongoing projects up-to-date. You can install the updates from the Episerver NuGet feed.

Main packages
This release information lists updated main package versions for the Episerver platform. When a release is built, other dependent packages also may be bumped to new versions, although they contain no publicly visible changes. This is done to avoid dependency errors. When you upgrade, NuGet alerts you to upgrade related packages to the required versions. For Commerce, it is important to ensure that you are running the same version of CMS and Commerce, both in the front-end and back-end applications.

Updated main packages

Click a package in the list to see work item details.

Episerver CMS Core

Episerver CMS UI

New feature: 

    • MAR-470: New KPI for CMS users to determine the "site stickiness"
      This new KPI, Site Stickiness, allows a CMS editor to select a target page and a timeout period (1-60 minutes). The A/B test counts a conversion if a visitor goes from the target page to any other page on the website during the set time period. If the visitor closes the browser and then opens the target page again within the specified time period, a new page view is not counted. However, a conversion is counted if the visitor goes from the target page to another page during the second visit. 

Episerver add-ons

New feature:

    • AFORM-888Improved service API for managing submissions
      Method DeleteFormData added for deleting posted data of a specified form.

Third-party add-ons


    • 2.0.1: Only try to delete a product once 
      In some cases we would aggregate deletions and end up with multiple deletions for the same product.
    • 2.0.1: Only set "Name" for the default/first language on products, variations and kits
      We were setting the "Name" property for every language, but now we are only setting it for the default/first language.
    • 2.0.2: Rhino.Licensing version updated.

New features, breaking changes, and bugfixes:

    • 3.0.0: Added support for Dynamics 365 for Operations 1611.

    • 3.0.0: Added auto property conversion for Long.

    • 3.0.0: Configuration value and property "ChannelId" has changed name to "StoreId".
      "StoreId" is now a string instead of a long.
      "OnlineChannelDto" changed name to "StoreDto".

    • 3.0.0: Configuration can now be extended by implementing "IExtendedStorefrontConfiguration", inheriting "StorefrontConfigurationSection" and modifying configuration section "storefront".

    • 3.0.1: Rhino.Licensing version updated.

Important notifications

Related topics

Last updated: Feb 27, 2017