I just did a fresh install of the latest stable Joomla, and installed Carbonation - Aug06, but the color, font size, and width buttons in the top right do not work. It returns a page saying "Direct Access to this location is not allowed." When I looked at this template on the demo prior to the vulnerability fix, it worked, but now, even on the demo, it does not. Any ideas on how to fix this? Thanks!
Please redownload the Carbonation XSS patch, I've fixed the error, there was an additional step needed for the syntax change and it should work properly now. I've also added a post to the Carbonation/Carbonite forum explaining the extra steps for patching, the details are in the updated XSS patch package readme as well.
Just to clarify, I did not see any mention of Novus or the other free releases in this list.
Are they indeed unaffected?
Novus is the only free template affected, you can download the latest version here:
joomlacode.org/gf/project/rockettheme/fr...&frs_package_id=3050
The only changes needed are to simply replace the "rt_styleloader.php" and "rt_stylechanger.php" files with the new ones in the 1.0.1 package.