Joomla! 3.9.16 Security Release announced

Release date: 10 March 2020.

Joomla! 3.9.16 is a Security Release which addresses SIX security vulnerabilities.

This release also includes several improvements.

See the Release Notes at the link below.

Read more: Joomla! 3.9.16 Release News.

Addressed Vulnerabilities

Low Priority

Core - SQL injection in Featured Articles menu parameters (affecting Joomla 1.7.0 through 3.9.15).
Core - CSRF in com_templates image actions (affecting Joomla 3.2.0 through 3.9.15).
Core - XSS in Protostar and Beez3 (affecting Joomla 3.0.0 through 3.9.15).
Core - Incorrect Access Control in com_templates (affecting Joomla 2.5.0 through 3.9.15).
Core - Identifier collisions in com_users (affecting Joomla 3.0.0 through 3.9.15).
Core - Incorrect Access Control in com_fields SQL field (affecting Joomla 3.7.0 through 3.9.15).

Back up before updating is highly recommended

Protect your assets.

Perform a FULL backup of your website (database and files) BEFORE updating the Joomla! CMS and/or its extensions.

Read more: How to back up your website.

Read more: How to update your Joomla! CMS & its extensions.