Joomla version 3.9.4 has officially been released. This update comes with several security fixes for the 3.x series of Joomla as well as multiple bug fixes and improvements to the system.
Security Issues
- High Priority - Core - Missing ACL check in sample data plugins (versions 3.8.0 through 3.9.3)
- Low Priority - Core - XSS in com_config JSON handler (versions 3.2.0 through 3.9.3)
- Low Priority - Core - XSS in item_title layout (versions 3.0.0 through 3.9.3)
- Low Priority - Core - XSS in media form field (versions 3.0.0 through 3.9.3)
Bug fixes and Improvements
- User Terms and Privacy Consent plugins: Layouts for the label and message added
- Featured articles: Page subheading added
- Custom formfield layout paths simplified
- Com_contact: Contact name field moved out of the Contact Information block
- Custom module: Improvement of the frontend editing
- Action Logs improvement: Cache and Purge/Export actions are now logged
For more information, please visit the official release notes or visit the Joomla GitHub for the full list of bug fixes.
