--- title: "Official Joomla! Announcements" description: "We help designers, developers, hobbyists and business owners get the most out of the Joomla CMS. Join us at our free monthly meetups, and let us help you with your Joomla projects." url: "https://www.joomlalondon.co.uk/official-joomla-announcements?start=165" date: "2026-09-09T17:09:38+00:00" language: "en-GB" --- # Official Joomla! Announcements ## [ \[20190701\] - Core - Filter attribute in subform fields allows remote code execution ](https://www.joomlalondon.co.uk/official-joomla-announcements/20190701-core-filter-attribute-in-subform-fields-allows-remote-code-execution) - **Project:** Joomla! - **SubProject:** CMS - **Impact:** Moderate - **Severity:** Low - **Versions:** 3.9.7 - 3.9.8 - **Exploit type:** Remote Code Execution - **Reported Date:** 2019-June-20 - **Fixed Date:** 2019-July-09 - **CVE Number: TBA** ### Description Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option. ### Affected Installs Joomla! CMS versions 3.9.7 - 3.9.8 ### Solution Upgrade to version 3.9.9 ### Contact The JSST at the [Joomla! Security Centre](https://developer.joomla.org/security-centre.html "Contact the JSST"). **Reported By:** Benjamin Trenkle, JSSTRead more [http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/6jkIqCFwOTE/787-20190701-core-filter-attribute-in-subform-fields-allows-remote-code-execution.html](http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/6jkIqCFwOTE/787-20190701-core-filter-attribute-in-subform-fields-allows-remote-code-execution.html "[20190701] - Core - Filter attribute in subform fi") ## [ Elastic Email Sender ](https://www.joomlalondon.co.uk/official-joomla-announcements/elastic-email-sender) Elastic Email Sender allows you to connect your Joomla website with the powerful, low-cost Elastic Email API and send unlimited emails per month! Please follow the information below and find out more about how we can help you send your emails in a more efficient way. In case you have any questions or concerns, feel free to contact us anytime. ### **What is Elastic Email Sender plugin?** Elastic Email Sender is an easy way to maintain all the aspects related to your email campaigns. From creating and sending your emails to monitoring and managing campaigns stats. Elastic Email Sender uses an API integration with Elastic Email which enables you to send outgoing email straight from your Joomla installation. Because of this, you can track all the parameters of your delivery, use Private IP addresses to get full control over your sending, maintain reputation and delivery and secure your data better than ever. You can also use your own domain and analyze your data with ease. ### **How to get started?** Just sign into your Elastic Email account, copy the API Key and log into your Joomla dashboard. Add the Elastic Email Sender plugin and paste the API Key from your Elastic Email account. Read more [http://feeds.joomla.org/~r/JoomlaExtensions/~3/t2Gf9x5HlhI/elastic-email-sender](http://feeds.joomla.org/~r/JoomlaExtensions/~3/t2Gf9x5HlhI/elastic-email-sender "Elastic Email Sender") ## [ TF Mail ](https://www.joomlalondon.co.uk/official-joomla-announcements/tf-mail) A powerful email marketing and automation component for Joomla. You can create users, lists, profile fields, newsletters, campaigns. Before sending emails, you can apply filters and add tags in newsletters based on various user profile fields. And, all this can be automated using cron job. Read more [http://feeds.joomla.org/~r/JoomlaExtensions/~3/2zjUXCZYrPU/tf-mail](http://feeds.joomla.org/~r/JoomlaExtensions/~3/2zjUXCZYrPU/tf-mail "TF Mail") ## [ JMZ Pricing Tables ](https://www.joomlalondon.co.uk/official-joomla-announcements/jmz-pricing-tables) **Main Features:** Create amazing pricing tables without any programming skills on your website in a matter of minutes. Simple and graphic visual representation with comprehensive purchase information are the main components of a pricing and compare table that sells.. - Google Fonts Support. - Ease of use. - Customizable columns to fit your website. - Support Font Awesome Icons. - Support to visible to all or registered users only (Access Level). - Very flexible in Settings. - Intuitive and user-friendly interface. - Customizable font size and weight. **Changelog** VERSION 1.0 - Released on June 17, 2019 First release. Read more [http://feeds.joomla.org/~r/JoomlaExtensions/~3/Kst\_N1Fh-Y4/jmz-pricing-tables](http://feeds.joomla.org/~r/JoomlaExtensions/~3/Kst_N1Fh-Y4/jmz-pricing-tables "JMZ Pricing Tables") ## [ JMZ Pie Chart ](https://www.joomlalondon.co.uk/official-joomla-announcements/jmz-pie-chart) It divides a circle into multiple slices that are proportional to their contribution towards the total sum. It is useful in comparing the share or proportion of various items. It is interactive, responsive, cross-browser compatible, supports animation. **Key Features** Google Fonts Support. Unlimited Pie Chart Elements. Support to arrange Pie Chart Elements. Support Font Awesome Icons. Support to visible to all or registered users only (Access Level). Very flexible in Settings. Unlimited Color. CSS3 Animation Support for the module in front-end. **Changelog** VERSION 1.0 - Released on June 5, 2019 First release. Read more [http://feeds.joomla.org/~r/JoomlaExtensions/~3/swWzov-DVBk/jmz-pie-chart](http://feeds.joomla.org/~r/JoomlaExtensions/~3/swWzov-DVBk/jmz-pie-chart "JMZ Pie Chart") 1. [ AA Contact Info](https://www.joomlalondon.co.uk/official-joomla-announcements/aa-contact-info) 2. [ WT Navbar](https://www.joomlalondon.co.uk/official-joomla-announcements/wt-navbar) 3. [ Add YTvideo](https://www.joomlalondon.co.uk/official-joomla-announcements/add-ytvideo) 4. [ Add YTvideo](https://www.joomlalondon.co.uk/official-joomla-announcements/add-ytvideo) Page 34 of 55 ## Schema ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Start", "item": "https://www.joomlalondon.co.uk" }, { "@type": "ListItem", "position": 2, "name": "Official Joomla! Announcements", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements" } ] } ```