Joomla! 3.9.28 Security Release announced
Joomla! 3.9.28 is a SECURITY FIX which addresses FIVE vulnerabilities.
See the Release Notes at the link below.
Read more: Joomla! 3.9.28 Release News.
Addressed Vulnerabilities
Low Severity
High Impact - Privilege escalation through com_installer (affecting Joomla! 2.5.0 through 3.9.27).
Moderate Impact - XSS in com_media imagelist (affecting Joomla! 3.0.0 through 3.9.27).
Moderate Impact - Lack of enforced session termination (affecting Joomla! 2.5.0 through 3.9.27).
Low Impact - XSS in JForm Rules field (affecting Joomla! 3.0.0 through 3.9.27).
Low Impact - DoS through usergroup table manipulation (affecting Joomla! 2.5.0 through 3.9.27).
Back up before updating is highly recommended
Protect your assets.
Perform a FULL backup of your website (database and files) BEFORE updating the Joomla! CMS and/or its extensions.
Read more: How to back up your website.
Read more: How to update your Joomla! CMS & its extensions.
Make Joomla! CMS Security YOUR #1 Priority
We offer Joomla! coaching, help and support to businesses and organisations across Cheshire, Manchester, Merseyside, North West England & the UK.