version 4.23.3 ( updated 12-26-2023 )
– Security Update: Fixed a bug that caused some modified administrator privileges to be reset on multisite. If a website had modified the administrator user role and removed the unfiltered_html privilege, that privilege was being mistakenly added back.
* core/components/SupportCenter.php
* includes/builder/module/Blog.php
version 4.23.2 ( updated 12-20-2023 )
– Security Update: Fixed a Stored Cross-Site Scripting Vulnerability: Resolved an issue where a contributor-level or author user could, by using a specific Divi shortcode linked to a custom field, introduce executable JavaScript from the custom field into posts.
– Fixed Free-form CSS not outputting the styles when styles exists for more than one module.
– Fixed the issue where AI and library fields were displayed on the ‘Find’ field in Find Replace.