Joomla! 3.9.20 Security Release announced

joomla support cheshire manchester merseyside north west ukRelease date: 14 July 2020.

Joomla! 3.9.20 is a SECURITY FIX which addresses SIX vulnerabilities. ONE of these is MODERATE.

See the Release Notes at the link below.

Read more: Joomla! 3.9.20 Release News.

 

Addressed Vulnerabilities

Moderate Priority

Core - Missing checks can lead to a broken usergroups table record (affecting Joomla! 2.5.0 through 3.9.19).

Low Priority

Core - CSRF in com_installer ajax_install endpoint (affecting Joomla! 3.7.0 through 3.9.19).
Core - CSRF in com_privacy remove-request feature (affecting Joomla! 3.9.0 through 3.9.19).
Core - Variable tampering via user table class (affecting Joomla! 3.0.0 through 3.9.19).
Core - Escape mod_random_image link (affecting Joomla! 3.0.0 through 3.9.19).
Core - System Information screen could expose redis or proxy credentials (affecting Joomla! 3.0.0 through 3.9.19).

 

Back up before updating is highly recommended

Protect your assets.

Perform a FULL backup of your website (database and files) BEFORE updating the Joomla! CMS and/or its extensions.

Read more: How to back up your website.

Read more: How to update your Joomla! CMS & its extensions.

 

Make Joomla! CMS Security YOUR #1 Priority

joomla support cheshire manchester merseyside north west ukWe offer Joomla! coaching, help and support to businesses and organisations across Cheshire, Manchester, Merseyside, North West England & the UK.

Learn how to manage Joomla! website security.