The Joomla Project is thrilled to announce the release of Joomla 5.1.2 and 4.4.6, focused on security enhancements and bug fixes. These updates continue Joomla's commitment to accessibility, simplicity, and security.

Security Fixes

  • Core XSS Vulnerabilities: Addressed various cross-site scripting (XSS) issues, including in the accessible media selection field, fancyselect list field layout, `StringHelper::truncate` method, wrapper extensions, and the default field value in `com_fields`.

Bug Fixes and Improvements in Joomla 5.1.2

  • Update Channel Reset: Added to Joomla Update Component.
  • Schema.org Loading: Improved to load only in relevant forms.
  • PDF Embedding: Re-enabled support.
  • Field Handling: Fixes for radio buttons, checkboxes, and nested subforms.

For the full list of changes, visit GitHub.

What’s shipped with 4.4.6?

  • Bugfixes

The full list on GitHub

Upgrading:

Joomla 4.4.x to 5.x is an upgrade, not a migration, ensuring a smooth transition.

How to Get Involved

Join the Joomla community, contribute to development, and help maintain documentation. The Joomla Bug Squad and CMS Release Team are always looking for new volunteers. 

For Developers:

A comprehensive manual for Joomla 5 is available to help extension developers adapt to the latest changes.

Spread the Word!

Let everyone know about Joomla 5.1.2 by sharing the news with the hashtag #Joomla5.

Try Joomla 5.0

without installation at launch.joomla.org.

A Big Thank You!

Huge thanks to all the volunteers who made this release possible! Your dedication to improving Joomla is invaluable.

For more details, visit the official Joomla announcement.