---
title: "Official Joomla! Announcements"
description: "We help designers, developers, hobbyists and business owners get the most out of the Joomla CMS.  Join us at our free monthly meetups, and let us help you with your Joomla projects."
url: "https://www.joomlalondon.co.uk/official-joomla-announcements?start=95"
date: "2026-09-09T16:20:03+00:00"
language: "en-GB"
---

#  Official Joomla! Announcements

##  [ \[20191002\] - Core - Path Disclosure in phpuft8 mapping files ](https://www.joomlalondon.co.uk/official-joomla-announcements/20191002-core-path-disclosure-in-phpuft8-mapping-files)

- **Project:** Joomla!
- **SubProject:** CMS
- **Impact:** Low
- **Severity:** Low
- **Versions:** 3.6.0 - 3.9.12
- **Exploit type:** Path Disclosure
- **Reported Date:** 2019-November-01
- **Fixed Date:** 2019-November-05
- **CVE Number:** [CVE-2019-18674](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18674)

### Description

Missing access check in the phputf8 mapping files could lead to an path disclosure.

### Affected Installs

Joomla! CMS versions 3.6.0 - 3.9.12

### Solution

Upgrade to version 3.9.13

### Contact

The JSST at the [Joomla! Security Centre](https://developer.joomla.org/security-centre.html "Contact the JSST").

**Reported By:** Phil TaylorRead more  [http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/Zi-lVuM4KoY/795-20191002-core-path-disclosure-in-phpuft8-mapping-files.html](http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/Zi-lVuM4KoY/795-20191002-core-path-disclosure-in-phpuft8-mapping-files.html "[20191002] - Core - Path Disclosure in phpuft8 map")

##  [ \[20191001\] - Core - CSRF in com\_template overrides view ](https://www.joomlalondon.co.uk/official-joomla-announcements/20191001-core-csrf-in-com-template-overrides-view)

- **Project:** Joomla!
- **SubProject:** CMS
- **Impact:** High
- **Severity:** Low
- **Versions:** 3.2.0-3.9.12
- **Exploit type:** CSRF
- **Reported Date:** 2019-October-10
- **Fixed Date:** 2019-November-05
- **CVE Number:** [CVE-2019-18650](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18650)

### Description

A missing token check in com\_template causes a CSRF vulnerability.

### Affected Installs

Joomla! CMS versions 3.2.0 - 3.9.12

### Solution

Upgrade to version 3.9.13

### Contact

The JSST at the [Joomla! Security Centre](https://developer.joomla.org/security-centre.html "Contact the JSST").

**Reported By:** Lee ThaoRead more  [http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/LaIC5kOPGB0/794-20191001-core-csrf-in-com-template-overrides-view.html](http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/LaIC5kOPGB0/794-20191001-core-csrf-in-com-template-overrides-view.html "[20191001] - Core - CSRF in com_template overrides")

##  [ Sixe Online Customer Service ](https://www.joomlalondon.co.uk/official-joomla-announcements/sixe-online-customer-service)

Sixe Online Customer Service provides online communication and contact information for browsing customers. Built in a variety of commonly used communication channels, including: phone, email, QQ number, map, two-dimensional code and many other ways. Hexawing online customer service plug-in can be very convenient to increase the number of calls, online customer service plug-in has become an important tool for network marketing, but also to show the image of the enterprise website, strengthen the enterprise and visitors interaction essential tools.

Read more  [http://feeds.joomla.org/~r/JoomlaExtensions/~3/VAWKDF2mCS4/sixe-online-customer-service](http://feeds.joomla.org/~r/JoomlaExtensions/~3/VAWKDF2mCS4/sixe-online-customer-service "Sixe Online Customer Service")

##  [ GEO Redirect for Joomla ](https://www.joomlalondon.co.uk/official-joomla-announcements/geo-redirect-for-joomla)

Define visitor’s geolocation by IP automatically and redirect them to a specific page. Based on IP identification the GEO Redirect plugin allows you send your visitors to specific landing pages, redirect them to different websites or just block them from accessing your site. With the use of the plugin, your foreign customers won’t have to choose the native language and currency manually, as they will be redirected to a proper page as soon as they open your website. Using the Easy Redirect you’ll manage to redirect visitors to specific URLs, switch currency, switch store view e.t.c.

With GEO Redirect, you can choose either to make a redirect between websites or only within one website. In case you have several websites you can manage your traffic in a few mouse clicks.

Read more  [http://feeds.joomla.org/~r/JoomlaExtensions/~3/Q1cFinETNnk/geo-redirect-for-joomla](http://feeds.joomla.org/~r/JoomlaExtensions/~3/Q1cFinETNnk/geo-redirect-for-joomla "GEO Redirect for Joomla")

##  [ RCA Search for HikaShop ](https://www.joomlalondon.co.uk/official-joomla-announcements/rca-search-for-hikashop)

Display search form with existing HikaShop categories. By using this module, users can search products on your HikaShop extension based shop filter by cagtegory.

### FEATURES:

- Responsive design
- Display search form with existing HikaShop Categories.
- Customisable search form width, height and colors.
- Show search results based on your selected HikaShop menu item's configuration.

Read more  [http://feeds.joomla.org/~r/JoomlaExtensions/~3/hNP2gzCDBt8/rca-search-for-hikashop](http://feeds.joomla.org/~r/JoomlaExtensions/~3/hNP2gzCDBt8/rca-search-for-hikashop "RCA Search for HikaShop")

1. [ Jx Site Preloader](https://www.joomlalondon.co.uk/official-joomla-announcements/jx-site-preloader)
2. [ ochSimpleFirewall](https://www.joomlalondon.co.uk/official-joomla-announcements/ochsimplefirewall)
3. [ Any Server Status](https://www.joomlalondon.co.uk/official-joomla-announcements/any-server-status)
4. [ RadicalForm](https://www.joomlalondon.co.uk/official-joomla-announcements/radicalform)

 Page 20 of 55

## Schema

```json
{ "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Start", "item": "https://www.joomlalondon.co.uk" }, { "@type": "ListItem", "position": 2, "name": "Official Joomla! Announcements", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements" } ] }
```