Seit 7 Januar 2025 steht die neue Joomla Version 5.2.3 zur Installation bereit. Diese Version ist ein Sicherheits- und Bugfix Update. Nachfolgend die Informationen aus der offiziellen Ankündigung von Joomla.

Wir bieten Joomla im Hosting und helfen bei der Migration, kontaktieren Sie uns gerne.

Joomla 5.2.3 Sicherheitsfixe laut Release Notes

• [20250101] - Core - XSS vectors in module chromes
• [20250102] - Core - XSS vector in the id attribute of menu lists
• [20250103] - Core - Read ACL violation in multiple core views

Joomla 5.2.3 Bugfixes laut Release Notes

• Fix joomlaExtButtons TinyMCE plugin, buttons validation (#44507)
• Email Validation apostrophe (#44527)
• Set correct AssetTitle and AssetParentId (#42493)
• Remove empty images and anchors from mod articles_news (#42493), mod articles_category (#44478) and (#44475)
• Remove wrong class in cancel link in add verification code frontend page (#44473)
• Allow multiselect for checkboxes (#44500)
• postgres and finder suggestions (#44384)
• Pre-update check for extensions AllowDynamicProperties (#44307)
• Fix PHPCS nullable parameter (#44543)
• Fix double closing Curly braces in inline style (#44532)
• Uncaught TypeError: can't access property "getAttribute", toggleButton is null (#44555)
• Plugins: Search not case-insensitive for unicode language (#44525)
• Fix increment on non-alphanumeric string deprecation (#44173)
• User: Don't reset newly set requireReset (#44519)
• CoreButtonsTrait back() generates wrong button text (#44509)
• Tags: Make router discover 404s properly (#44540)
• Catch exception to get the user in the action log model (#44358)
• Fix return typehint in IdentityAware trait (#44567)
• Composer update joomla/application to 3.0.3 to fix PHP deprecations in Web Client (#44585)
• User: Allow MFA before password reset (#44521)
• Fix duplicate entry with the action logs by removing the second call to onJoomlaAfterUpdate (#44629)
• [CLI] extension:remove -n option "Invalid Response" fix (#44546)
• Privacy: Allow MFA and invalid privacy consents (#44522)
• Refresh changelog URL on manifest cache refresh (#44565)

Alle Informationen unter: https://www.joomla.org/announcements/release-news/5919-joomla-5-2-3-security-bugfix-release.html