If your website uses Joomla! 3.7.0 it is at risk: UPDATE NOW
Joomla! 3.7.1 was released on:
Wednesday 17th May 2017 at 15:00 GMT
It addresses one mega critical security vulnerability and several bug fixes.
Why Joomla! 3.7.1 is so important
Joomla! 3.7.1 addresses a vulnerability caused by the new FIELDS component which was introduced with Joomla! 3.7.0.
If your website uses Joomla! 3.7.0 then it is affected.
This vulnerable FIELDS component is publicly accessible, which means the issue can be exploited by any malicious individual visiting your website.
You therefore need to act quickly.
"Given the nature of SQL Injection attacks, there are many ways an attacker could cause harm – examples include leaking password hashes and hijacking a logged-in user’s session (the latter results in a full site compromise if an administrator session is stolen)." Source: SUCURI Blog.
How to back up & update your website
We illustrate how to back up and update a Joomla! website in our Joomla! User Guide.
See links below.
WYNCHCO Joomla! CMS Support
We coach, help and support managers with responsibility for Joomla! websites in organisations across Cheshire, Manchester, Merseyside, North West England & the UK.