Certification Program: team meeting - January 13th, 2021
The JCP January monthly team meeting was held on January 13th, 2021 at 18:00 (UTC) using Google Meet.
Participants:
Attendees:Andrea Gentil (ATL), Jeroen Moolenschot, Luca Marzo and Chris Keen (TL).
Guest: Jaz
Parkyn (Dept. Co-ordinator)
Absent with apologies: None
General points
- Details
- Category: JBlogs
Joomla 3.9.24 Release
Joomla 3.9.24 is now available. This is a security release for the 3.x series of Joomla which addresses 3 security vulnerabilities and contains more than 35 bug fixes and improvements....
- Details
- Category: JAnnouncements
[20210103] - Core - XSS in com_tags image parameters
- Project: Joomla!
- SubProject: CMS
- Impact: Moderate
- Severity: Low
- Versions:3.1.0 - 3.9.23
- Exploit type: XSS
- Reported Date: 2020-09-01
- Fixed Date: 2021-01-12
- CVE Number: CVE-2021-23125
Description
Lack of escaping of image-related parameters in multiple com_tags views cause lead to XSS attack vectors.
Affected Installs
Joomla! CMS versions 3.1.0 - 3.9.23
Solution
Upgrade to version 3.9.24
Contact
The JSST at the Joomla! Security Centre....
- Details
- Category: Security Announcements
Volunteer Engagement Team: Meeting December 28th 2020
Volunteer Engagement Team Meeting Minutes
December 28th, 2020 at 13:00 UTC
- Details
- Category: JBlogs
[20210102] - Core - XSS in mod_breadcrumbs aria-label attribute
- Project: Joomla!
- SubProject: CMS
- Impact: Moderate
- Severity: Low
- Versions:3.9.0 - 3.9.23
- Exploit type: XSS
- Reported Date: 2020-09-01
- Fixed Date: 2021-01-12
- CVE Number: CVE-2021-23124
Description
Lack of escaping in mod_breadcrumbs aria-label attribute allows XSS attacks.
Affected Installs
Joomla! CMS versions 3.9.0 - 3.9.23
Solution
Upgrade to version 3.9.24
Contact
The JSST at the Joomla! Security Centre....
- Details
- Category: Security Announcements
