5.9.11

2026-02-04 Fix12 Security1 Tweak1

Fixes

  • Resolved an issue where the "Result messages" list item text would output HTML tags instead of stripping them out.
  • Resolved an issue when creating or editing a Course using the Frontend Editor with LearnDash LMS v5.0.0 enabled where the "Course points - Required for access" and the "Course points - Awarded on completion" values would be invalid if not set.
  • Resolved an issue where Administrators could not remove any Groups from a Course and Instructors could not remove all Groups from a Course when using the Frontend Course Editor.
  • Resolved an issue where all Users could not be removed from a Course when using the Frontend Course Editor.
  • Resolved an issue where an administrator couldn't submit a comment on an assignment from the instructor dashboard.
  • Resolved an issue where course prerequisites and course points could not be properly enabled in the frontend course builder.
  • Resolved an issue where multiple updates to Enrollment-based Quiz Release Schedule via the Frontend Quiz Editor could clears the field.
  • Resolved an issue where the "Custom Field Name" field would lose focus after each character input.
  • Resolved an issue where the "Custom Fields" toggle switch value was not saved in the database or output correctly on the frontend quiz builder.
  • Resolved an issue where the "Result messages" toggle setting value couldn't be stored in database.
  • Resolved an issue where the Groups custom pagination settings were not persisted in the database.
  • Resolved an issue where the ldlms/v2/sfwd-courses/{id}/groups endpoint would be called twice whenever it was called if the logged in user was an Instructor.

Security

  • Improved security around assignment and essay REST API endpoints.

Tweaks

  • Updated the frontend quiz builder to accommodate the LearnDash Core REST API v2 changes.