After the release of version 2.4, we are forced to think hard about the future of JomSocial. Our designers and developers always have tons of new ideas but being a component that run within Joomla! templates forces us to scale down a lot of those ideas. Quite a number of highly interactive features have to be put on hold, delayed or

After the release of version 2.4, we are forced to think hard about the future of JomSocial. Our designers and developers always have tons of new ideas but being a component that run within Joomla! templates forces us to scale down a lot of those ideas. Quite a number of highly interactive features have to be put on hold, delayed or

• Project: Joomla!
• SubProject: All
• Severity: Low
• Versions: 2.5.6 and all earlier 2.5.x versions
• Exploit type: XSS Vulnerability
• Reported Date: 2012-April-30
• Fixed Date: 2012-September-13

Description

Inadequate escaping of output leads to XSS vulnerability.

Affected Installs

Joomla! versions 2.5.6 and all earlier 2.5.x versions

Solution

Upgrade to version 2.5.7

R

The Joomla Project is pleased to announce the immediate availability of Joomla 2.5.9. This is a security release. The Production Leadership Team's goal is to continue to provide regular, frequent updates to the Joomla community. Learn more about Joomla! development at the Developer Site.

The update process is very simple, and complete instructions