Joomla Hub - новости и обновления

J2S tore. Security Announcement - Releases 3.3.21, 4.0.21 and 4.1.6 J2Store 3.3.21, 4.0.21 and 4.1.6 are security releases that address six vulnerabilities in the com_j2store component: three authorization/IDOR issues where controller tasks accepted client-supplied identifiers without verifying ownership, one open redirect issue where user-supplied URLs were decoded and used without host validation, one unauthenticated file upload issue compounded by a missing installer manifest entry that left uploaded files web-accessible, and one stored cross-site scripting issue in the administrator order management panel exploitable via the guest checkout flow. • Release date: 2026-08-20 • Affected versions: All J2Store versions prior to 4.1.6 • Fixed in: J2Store 3.3.21, 4.0.21 and 4.1.6 • Severity: High (CVSS 4.0 scores range from 5.1 to 8.7) J2Store 4.x was forked and now it is J2Commerce 6.x - a free ecommerce extension for Joomla 6. Read more

J!Awards: Community Choice Awards Joomla! Launches Inaugural J!Awards, Celebrating 21 Years of Community-Driven Innovation. The Joomla! project today announced the launch of the J!Awards: Community Choice Awards, a new awards program created to celebrate the people, projects, and tools that make Joomla what it is. The launch date is no coincidence: 17 August 2026 marks the 21st anniversary of Joomla, and the project chose the occasion to kick off a new tradition celebrating the community that has powered two decades of growth. Nominations open today, with this year's winners to be announced live at Joomla World Conference (JWC) in Potsdam, near Berlin, Germany, taking place 16–18 October 2026. If you use Joomla, you're already part of the community — and your voice belongs in these awards. The J!Awards are open to everyone: site owners, developers, designers, writers, agencies, hosting customers, and casual users alike. You don't need to be a longtime contributor, hold any official role, or be active on the forums to nominate or vote. Using Joomla is your all-access pass. "As President of Open Source Matters, I'm genuinely excited about the Joomla! Awards, because they put the wonderful people and projects behind Joomla into the spotlight," said Elisa Foltyn, President of Open Sources Matters. Read more

Sourcerer 14.0.0 fixes PHP execution from unverified content On 17 August 2026 Regular Labs released version 14.0.0 of Sourcerer, the Joomla extension that lets you place PHP, JavaScript and CSS inside your content. The changelog carries one entry tagged both [SECURITY FIX] and [BC BREAK]: Sourcerer 14.0.0 changelog, the security entry in full [SECURITY FIX] [BC BREAK] Prevents reflected or otherwise unverified rendered Sourcerer code from executing by default while preserving verified article and Custom module code Read more