Joomla 4.4.10 - Security Release

On Tuesday, January 7, 2025, Joomla 4.4.10 was released. This is a security release that resolves three security issues in Joomla 4.x. 

Resolved security issues

This security update resolves three security issues:

• [20250101] - Core - XSS vectors in module chromes
  Various module chromes did not process inputs correctly.
• [20250102] - Core - XSS vector in the id attribute of menu lists
  Lack of output escaping in the id attribute of menu lists.
• [20250103] - Core - Read ACL violation in multiple core views
  Incorrect access control allows access to protected views.

No further improvements have been made to Joomla 4.4. This version is no longer being developed and since October 2024, only security updates are being released for the Joomla 4 series. 

However, the upgrade from version 4.4.x to Joomla 5.x is a simple upgrade, not a complex migration. Moreover, most extensions will continue to work without issues if you enable the "Backward Compatibility" plugin.

Do you need support with updating or migrating to Joomla 5? Then contact us..