Changes from 6.17.18 (build 260831) to 6.17.19 (build 260832) August 31, 2026
#Updated translation: Turkish by kayazeren
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: Japanese by d_inoue
#Updated translation: Italian by lfanfoni
#Updated translation: Italian (Informal) by lfanfoni
#Updated translation: Dutch by c_schmitz, Han
#Updated translation: Dutch (Informal) by c_schmitz, Han
Changes from 6.17.17 (build 260820) to 6.17.18 (build 260831) August 31, 2026
-Fixed issue: [security] Stored XSS in survey menu entries (Carsten Schmitz)
-Fixed issue: [security] Stored XSS in replacement-fields question title rendering (Carsten Schmitz)
-Fixed issue: [security] Stored XSS in quota message rendering (Carsten Schmitz)
-Fixed issue: [security] Improper authorization in survey menu entry creation (Carsten Schmitz)
-Fixed issue #20655: Incorrect message text when soft-mandatory question was not answered (Carsten Schmitz)
Changes from 6.17.16 (build 260814) to 6.17.17 (build 260820) August 20, 2026
Changes from (build ranslation:) to 6.17.17 (build 260820) August 20, 2026
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: Japanese by nomoto
#Updated translation: Hungarian by kkd
#Updated translation: Hungarian (Informal) by kkd
#Updated translation: Dutch by ginosupport, Han
#Updated translation: Dutch (Informal) by Han
Changes from 6.17.15 (260811) to 6.17.16 (build 260814) August 13, 2026
-Fixed issue #20652: [security] Reflected XSS in HTML Editor popup endpoint (#5231) (Carsten Schmitz)
-Fixed issue #20651: [security] SQL Injection in CPDB through a token (#5226) (Stefan K)
-Fixed issue #20648: [security] SQL injection in statistics (Carsten Schmitz)
Changes from 6.17.14 (build 260805) to 6.17.15 (build 260811) August 11, 2026
-Fixed issue #20642: [security] Unauthenticated arbitrary plugin-method invocation (#5218) (Carsten Schmitz)
-Fixed issue #20641: [security] Missing survey permission check (#5220) (Carsten Schmitz)
-Fixed issue #20523: [security] Server-side request forgery (SSRF) vulnerability (Carsten Schmitz)
#Updated translation: Portuguese (Portugal) by ricardo.santos, xastrefernando
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
Changes from 6.17.13 (build 260728) to 6.17.14 (build 260805) August 5, 2026
-Fixed issue: Bulk edit participants not working when in "select all" mode (#5179) (Stefan K)
-Fixed issue #20606: Make sure repeated opening of preview survey does not cause survey submit errors (#5206) (haythem chibani)
-Fixed issue #20550: Subquestion conditions do not work in mobile view (#5199) (Gabriel Jenik)
#Updated translation: Russian by vipgroup
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: Japanese by d_inoue
#Updated translation: Italian by lfanfoni
#Updated translation: Italian (Informal) by lfanfoni
#Updated translation: Dutch by Han
#Updated translation: Dutch (Informal) by Han
#Updated translation: Czech by jelen1
#Updated translation: Catalan by qualitatuvic
Changes from 6.17.11 (build 260706) to 6.17.12 (build 260721) July 21, 2026
-Fixed issue #LE-827: Interface language auto detect inconsistency when switching editor and error in account settings (#5142) (haythem chibani)
-Fixed issue #AT-2176: Question validation tip value is not exported for additional languages when exporting as txt (#5143) (Rami S. Zaki)
-Fixed issue #20606: Response table schema is incorrect when activating a survey after previewing (#5147) (haythem chibani)
#Updated translation: Swahili by FredaM
#Updated translation: Portuguese (Portugal) by ricardo.santos
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: Italian by lfanfoni
#Updated translation: Italian (Informal) by lfanfoni
#Updated translation: Galician by Calidonia, Gronnd
#Updated translation: Dutch by Han
#Updated translation: Dutch (Informal) by Han
#Updated translation: Croatian by rovinj
Changes from 6.17.10 (build 260622) to 6.17.11 (build 260706) July 6, 2026
-Fixed issue #AT-2010: LS6 added capability to check items across multiple pages (#5067) (Patricia Stell)
-Fixed issue #20561: Editing the default answers for a multiple-choice question results in a database error (#5076) (twilligls)
#Updated translation: Valencian by vbraque
#Updated translation: Turkish by bulent, c_schmitz, kayazeren
#Updated translation: Hungarian by kkd
#Updated translation: Hungarian (Informal) by kkd
#Updated translation: Dutch by Han
#Updated translation: Dutch (Informal) by Han
#Updated translation: Catalan by c_schmitz, jmontane, qualitatuvic, valdomir
Changes from 6.17.9 (build 260619) to 6.17.10 (build 260622) June 22, 2026
+New feature #12393: 'Check all' boxes in data integrity check (Carsten Schmitz)
-Fixed issue: navbar hover and focus styles not fitting with light buttons (#5069) (Tim Willig)
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: Hungarian by c_schmitz, johnyh, kkd
#Updated translation: Hungarian (Informal) by c_schmitz, kkd
#Updated translation: Dutch by Han
#Updated translation: Dutch (Informal) by Han
#Updated translation: Croatian by rovinj
Changes from 6.17.8 (build 260616) to 6.17.9 (build 260619) June 17, 2026
-Fixed issue AT-2090: [security] SQL injection vulnerability in statistics (Carsten Schmitz)
#Updated translation: Portuguese (Portugal) by ricardo.santos
#Updated translation: Italian by lfanfoni
#Updated translation: Italian (Informal) by lfanfoni
Changes from 6.17.7 (build 260610) to 6.17.8 (build 260616) June 16, 2026
-Fixed issue #20560: Automatically writing the Allowed hosts file may fail silenty (Carsten Schmitz)
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: Czech by jelen1
Changes from 6.17.6 (build 260604) to 6.17.7 (build 260610) June 10, 2026
-Fixed issue: [security] Hardening CPDB response link deletion (Carsten Schmitz)
-Fixed issue #CT-1758: Decrypting encrypted responses in the new editor (#5034) (Rami)
-Fixed issue #20549: [security] SQL Injection in RemoteControl invite_participants and remind_participants (#5031) (Denis Chenu)
-Fixed issue #20548: [security] Host header injection in password reset (#5032) (Carsten Schmitz)
#Updated translation: Italian by c_schmitz, drsi.staff, lfanfoni, lfortunato, myliserta, ritapas
#Updated translation: Italian (Informal) by c_schmitz, ciampix, lfanfoni, murya, myliserta
#Updated translation: French (France) by b00z00, DenisChenu, GuillaumeZ6, jayce, pasglop
#Updated translation: Dutch by Han
#Updated translation: Dutch (Informal) by Han
Changes from 6.17.5 (build 260527) to 6.17.6 (build 260604) June 4, 2026
-Fixed issue: updates through ComfortUpdate are no longer incorrectly marked as unstable (Patrick Teichmann)
-Fixed issue: [security] Vulnerability in twig template engine and deprecated twig attribute calls - this fix requires the minimum PHP version to be raised to 8.1. (#5026) (Carsten Schmitz)
-Fixed issue #20489: [security] Publicly reachable file upload via RemoteControl API (#4889) (Denis Chenu)
#Updated translation: Valencian by c_schmitz, joamuran, sergarb1, valdomir, vbraque
#Updated translation: Spanish (Spain) by aesteban, artasom, atavei, c_schmitz, Ignacio, ireneoh, jmlopez, jparis, larjona, naiara.maya, Nodens, oleggorfinkel, perexat, segui, valdomir, xastrefernando, xtingray
#Updated translation: Portuguese (Portugal) by ricardo.santos
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: German by actxcellence, assistedmindfulness, c_schmitz, eddylackmann, Joffm, Liam, mfaber
#Updated translation: French (France) by AnneSophieB, DenisChenu, fgervais, mapage, riqcles
#Updated translation: Finnish by Jmantysalo
#Updated translation: Dutch by c_schmitz, Han, kpadm, L191, mdekker, MrP
#Updated translation: Dutch by Han, zfocuz
#Updated translation: Dutch (Informal) by atvoogt, c_schmitz, Han
#Updated translation: Dutch (Informal) by Aanouk, c_schmitz, Han, zfocuz
#Updated translation: Croatian by rovinj
#Updated translation: Catalan by qualitatuvic
Changes from 6.17.4 (build 260520) to 6.17.5 (build 260527) May 26, 2026
-Fixed issue #AT-2056: Increase pagination to 250 and 500 (#5001) (Patricia Stell)
-Fixed issue #AT-1897: design fixes for CSS states (#4992) (Tim Willig)
-Fixed issue #20527: Bad order of default response list for multiple text question (Carsten Schmitz)
-Fixed issue #20524: [security] Unsanitized null condition key (thank you for reporting Nagarajan Selvaraj Paulmony)(#4988) (Stefan K)
-Fixed issue #20507: Unclosed twig comments in vanilla/fruity_twentythree themes (Mathieu Bruyen)
-Fixed issue #19824: Page size of central participant list was limited to 100 (Carsten Schmitz)
-Fixed issue #19571: Text fixes for templates -> themes (Carsten Schmitz)
-Fixed issue #15946: File upload question: cannot select csv file (Carsten Schmitz)
#Updated translation: Portuguese (Portugal) by ricardo.santos
#Updated translation: Japanese by d_inoue, nomoto
#Updated translation: German by c_schmitz
#Updated translation: French (France) by DenisChenu