5.2.4
| Security |
Fixed an SQL injection vulnerability in the backend task list of the Scheduled Tasks component com_scheduler (CVE-2025-22207).
|
| Fixed |
Fixed namespace map creation when using PHP 8.4 (#44789).
|
| Fixed |
Fixed PHP warnings for the debuguser and debuggroup parameters (#44721).
|
| Fixed |
Fixed the handling of null values when updating a database row (#39607).
|
| Fixed |
Fixed the incorrect counting of files in the cache (#43986).
|
| Fixed |
Fixed permissions for manually running scheduled tasks (#36719).
|
| Fixed |
Restored support for numeric and CSV-formatted identifiers in the Tag Router (#44784).
|
| Fixed |
Updated the enshrined/svg-sanitize library to resolve SVG upload issues (#44746).
|
| Fixed |
Fixed an issue that prevented articles from being saved successfully on the frontend (#44680).
|
| Fixed |
Fixed downloading media files whose names contain spaces (#44745).
|
| Fixed |
Removed unnecessary query elements from Smart Search router URLs (#44055).
|
| Fixed |
Fixed conflicts between the Jooa11y plugin and page caching (#41956).
|
| Fixed |
Fixed an accessibility issue with the accordion role attribute (#40578).
|
| Fixed |
Removed unnecessary alternative text from menu items containing both an image and a title (#40675).
|
| Fixed |
Fixed the breadcrumbs colour in light and dark modes (#44212).
|
| Fixed |
Fixed email alternative text in the Contacts component (#44491).
|
| Fixed |
Fixed incorrect loading of external resources ending with a slash in the Web Asset Manager (#44774).
|
| Fixed |
Fixed multi-select behaviour in the Media Manager (#44747).
|
| Fixed |
Improved error handling when creating folders in the Media Manager (#39878).
|
| Fixed |
Fixed assets for the com_scheduler component on new Joomla installations (#44684).
|
| Fixed |
Fixed password reset functionality in the administrator interface (#44723).
|
| Fixed |
Fixed the Email Cloaking plugin for email addresses containing internationalised domain names (#39888).
|
| Fixed |
Changed root-path removal so that the path is removed only when it appears at the beginning of the string (#36685).
|
| Fixed |
Reverted the change that loaded the namespace from the cached manifest (#44755).
|
| Fixed |
Fixed duplicated CodeMirror asset entries (#44674).
|