| Security |
[20260301] Hardened ACL checks in com_ajax.
|
| Security |
[20260302] Fixed an SQL injection vulnerability in the com_content articles web service endpoint.
|
| Security |
[20260303] Fixed an XSS vulnerability in the com_associations comparison view.
|
| Security |
[20260304] Fixed XSS vulnerabilities in various article title outputs.
|
| Security |
[20260305] Fixed an arbitrary file deletion vulnerability in com_joomlaupdate.
|
| Security |
[20260306] Fixed improper access checks in web service endpoints.
|
| Fixed |
#47271 — Fixed flashing icons in the administrator sidebar.
|
| Fixed |
#46908 — Fixed PHP warnings when opening the Page Break modal window.
|
| Fixed |
#45357 — Fixed placeholder rendering when retrieving articles through the content/articles endpoint.
|
| Fixed |
#47427 — The media edit button is now disabled when no media action plugins are enabled.
|
| Fixed |
#47251 — Fixed relative asset paths on the Cassiopeia error page.
|
| Fixed |
#47388 — The Versions button is now hidden when com_contenthistory is disabled.
|
| Fixed |
#47376 — Fixed MailHelper::isEmailAddress() throwing an exception for invalid domain characters.
|
| Fixed |
#46933 — Fixed undefined array key warnings in workflow permissions.
|
| Fixed |
#47352 — Selector filters are now reset when SearchTools filters are cleared.
|
| Fixed |
#47336 — Added a check to verify that the schema path specified in the manifest exists.
|
| Fixed |
#47217 — Fixed scheduled tasks stopping when one task becomes stuck.
|
| Fixed |
#47244 — Fixed padding in Choices.js selection fields.
|
| Fixed |
#47263 — Fixed conditional Read More link output in mod_articles.
|
| Fixed |
#47218 — Fixed duplicate article counts in mod_tags_popular.
|
| Fixed |
#47268 — Fixed flashing icons in the administrator sidebar.
|
| Fixed |
#47293 — Added new Joomla versions to CONTRIBUTING.md.
|
| Fixed |
#47226 — Fixed the selected checkmark background in Choices.js fields.
|
| Fixed |
#46929 — Exposed the update filename during the automatic update preparation step.
|
| Fixed |
#46881 — Added publishing status checks when retrieving banner items.
|
| Fixed |
#46910 — Fixed calendar display for right-to-left languages.
|
| Fixed |
#46719 — Fixed the content data-transitions attribute being inherited from the first allowed item.
|
| Fixed |
#46889 — Fixed TinyMCE initialization in Firefox Developer Edition.
|
| Fixed |
#46811 — Fixed date highlighting in the front-end calendar.
|
| Note |
Joomla 6.0.4 is a security release. Installing the update as soon as possible is strongly recommended.
|
| Note |
Joomla 6.0.4 was released together with Joomla 5.4.4.
|
| Note |
Creating a website backup and checking the compatibility of installed extensions and templates is recommended before updating.
|
| Note |
Information about known issues in Joomla 6.0.4 is available in the official Joomla documentation.
|