These updates files prefix the attachments with random number, in the support reply section of Customer Helpdesk module, and also append '.txt' to the end of the attached files. It stops attached files from being executed via web browser.

Also, the updates will sanitize the 'path' value in the 'config.php' using the 'unset()' function. These functions will be written automatically to the top of the 'config.php' file upon installation.

How to apply updates:

1. The updates files are available in your web server, and you can apply the updates via the Cpanel.
   
2. You need to add the below codes to the top of the 'config.php' file:
   
    unset($_POST["path"]);
    unset($_GET["path"]);
    unset($_REQUEST["path"]);
   
   
3. For those website that are installed with SiteBuilder CX after these updates have been applied, there is no need to add the above 'unset' codes to the 'config.php' manually, the codes will be added into the config.php file automatically upon installation.