Security update for Joomla: Version 3.9.2

A new security update for Joomla is now available, version 3.9.2. This is a security release addresses 4 security vulnerabilities and contains over 50 bug fixes and improvements.

Security Issues Fixed

  • Low Priority - Core - Stored XSS in mod_banners (affecting Joomla 2.5.0 through 3.9.1) More information »
  • Low Priority - Core - Stored XSS in com_contact (affecting Joomla 2.5.0 through 3.9.1) More information »
  • Low Priority - Core - Stored XSS issue in the Global Configuration textfilter settings (affecting Joomla 2.5.0 through 3.9.1) More information »
  • Low Priority - Core - Stored XSS issue in the Global Configuration help url (affecting Joomla 2.5.0 through 3.9.1) More information »

Bug fixes and Improvements

  • Fixes for states in com_finder (#23194), com_banners (#23193),  com_messages (#23192), com_users notes (#23191)
  • Removal of the Caching field in the languages (#23174), syndicate (#23166), random image (#23165), and login modules (#23152)
  • Editors API extended #23224
  • Menu Item Alias type: Redirection is optional #23278
  • com_media: Normalisation of uploaded file names (#23259)
  • Code cleanup and namespacing

[googlead90][/googlead90]

Visit GitHub for the full list of bug fixes.

Advertising
Advertising

See also


Joomla 4.2.8 Security Release

Joomla 4.2.8 Security Release

16 February 2023
Joomla 4 release date

Joomla 4 release date finally confirmed!

30 July 2021
CVE Numbering Authority (CNA)

Joomla is now running its own CVE Numbering Authority (CNA)

31 December 2020
Copyright 2021 - Joomlaboratory