📰 [20191202] - Core - Various SQL injections through configuration parameters
▶️ Security Centre

- Project: Joomla!
- SubProject: CMS
- Impact: High
- Severity: Low
- Versions: 2.5.0 - 3.9.13
- Exploit type: SQL injection
- Reported Date: 2019-December-01
- Fixed Date: 2019-December-17
- CVE Number: CVE-2019-19846

Description
The lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors.
Affected Installs
Joomla! CMS versions 2.5.0 - 3.9.13
Solution
Upgrade to version 3.9.14
Contact
The JSST at the Joomla! Security Centre.
Reported By: ka1n4t

🔗 Joomla! Security Announcements

#SecurityCentre #JoomlaSecurityAnnouncements #JoomlaSecurity #JoomlaOrg

📣 @joomlanews

📰 [20191201] - Core - Path Disclosure in framework files
▶️ Security Centre

- Project: Joomla!
- SubProject: CMS
- Impact: Low
- Severity: Low
- Versions: 3.8.0 - 3.9.13
- Exploit type: Path Disclosure
- Reported Date: 2019-November-22
- Fixed Date: 2019-December-17
- CVE Number: CVE-2019-19845

Description
Missing access check in framework files could lead to a path disclosure.
Affected Installs
Joomla! CMS versions 3.8.0 - 3.9.13
Solution
Upgrade to version 3.9.14
Contact
The JSST at the Joomla! Security Centre.
Reported By: Lee Thao, Viettel Cyber Security

🔗 Joomla! Security Announcements

#SecurityCentre #JoomlaSecurityAnnouncements #JoomlaSecurity #JoomlaOrg

📣 @joomlanews

📰 Listing Verification Process
▶️ Joomla! Volunteers Portal

JRD Status:

- 1 new submission, approved
- Approvals total: 460

Topics
Listing Verification Process: Richard presented a local installation demo to show an annual listing verification for the provider and how the information is captured in the database using Joomla’s core privacy suite plugins. Discovered that the workflow of the privacy suite does not match the necessary work flow for the JRD listing. The user cannot make corrections to their listings without approving the listing first.
On the call:

- Karen
- Richard
- Deb
- Zehn

Next meeting:

- January 7, 2020: Topics to cover - what did we find regarding custom code that could be used for renewal process?
- January 21, 2020

🔗 Joomla! Volunteers Portal

#JoomlaVolunteersPortal

📣 @joomlanews

📰 CG Secure
▶️ Access & Security

Version: 1.0.14
Developer: conseilgouz
License: GPLv2 or later
Type: Free download
Includes: Component, Plugin
Compatibility: Joomla! 3.0, Joomla! 4alpha

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

CG Secure Package restricts access to your admin/Joomla forms depending on country/spammer status from ABuseIPDB.

Block And Report :
- hide /administrator,
- hide Joomla connexion forms,
- may even hide Contact forms.

to unwanted visitors and report them to AbuseIPDB.

Just a library call to hide RSForms or VisForms forms, even PhocaDownload links

Version 1.0.14 : bypass com_users.profile in contact form

🔗 Joomla! Latest Extensions

#AccessSecurity #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 EB Sticky Cookie Notice
▶️ Cookie Control

Version: 1.0
Developer: Extnbakers
License: GPLv2 or later
Type: Free download
Includes: Module
Compatibility: Joomla! 3.0, Joomla! 4alpha

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

EB Sticky Cookie Notice allows you to elegantly inform users that your site uses cookies and to comply with the EU cookie law GDPR regulations.

You can simply install it on DEBUG module position and add your COOKIES Message with link too, so you may redirect your users to your cookie specific page on your website.

FEATURES:


- Compatible with Joomla 2.5.x , 3.x.x and 4 Alpha
- Compatible with all Browsers
- Fully Responsive
- Easy 1 minute installation. Installation is very easy, no coding experience is required to have module up-and-running.
- Configure the location of cookie Position TOP/Bottom of your webpage.
- Configure Accept cookie button to allow cookie.
- Configure Accept cookie button text.
- Allowed HTML Tags in Text to add Learn more link or third party links.
- Configure links text color.
- Configure Popup Background color.
- Configure Heading Text and color.

🔗 Joomla! Latest Extensions

#CookieControl #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 Simple Cookie Consent
▶️ Cookie Control

Version: 1.0.1
Developer: SimpleTools.nl
License: GPLv2 or later
Type: Free download
Includes: Plugin
Compatibility: Joomla! 3.0

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Simple Cookie Consent is a lightweight Joomla! plugin for alerting users about the use of cookies on your website.

A free solution to the EU, GDPR, and California Cookie Laws.

It is designed to help you quickly comply with the EU Cookie Law, CCPA, GDPR and other privacy laws.

We made it fast, free, and relatively painless

🔗 Joomla! Latest Extensions

#CookieControl #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 16th Dec 2019 VET Monthly meeting
▶️ Joomla! Volunteers Portal

Joomla VET Meeting Minutes
16th December 2019 6pm UTC...

🔗 Joomla! Volunteers Portal

#JoomlaVolunteersPortal

📣 @joomlanews

📰 Joomla Bug Squad Team Meeting - December 20, 2019
▶️ Joomla! Volunteers Portal

Date: December 20, 2019

🔗 Joomla! Volunteers Portal

#JoomlaVolunteersPortal

📣 @joomlanews

📰 Sports Management
▶️ Sports & Games

Version: 3.2.0
Developer: Fussball in Europa
License: GPLv2 or later
Type: Free download
Includes: Component, Module, Plugin
Compatibility: Joomla! 3.0, Joomla! 4alpha

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Sports Management, or JSM for short, is a component for managing many sports

Product includes huge number of basic features
Basic Data management:
- Sports Types
- Seasons
- Leagues
- Federations
- Countries
- Associations
- Positions
- Events
- Agegroups


Personal data management:
- Clubs
- Teams
- Persons
- Venues
- Roster position


Addons
- Prediction Game integration
- ISHD XML-Import


Import functions


- JoomLeague
- LMO (Ligamanager-Online)
- Professional League
- DFB-Net
- SIS


26 different modules for use in the frontend.
And we give you all of that for free.

🔗 Joomla! Latest Extensions

#SportsGames #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 AA Content Theft Protection
▶️ Access & Security

Version: 1.0.0
Developer: AA Extensions
License: GPLv2 or later
Type: Paid download
Includes: Plugin
Compatibility: Joomla! 3.0, Joomla! 4alpha

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

A plugin that adds the source URL of your website attached to the copied text. It means if they copy your content, you get a hidden backlink from their content. This will discourage people to copy content. It’s a simple theft protection system.

Features it has :

It works with any content
Works with any templates.
Cross-browser support.
Simple and Friendly user interface.
Ease to use.


Supported Platform:

Joomla 3.x and Joomla 4.X

Note: Any issue let me know. Joomla latest version (3.x and 4.0) tested and working great 🙂

How to use :

1) Just install the plugin and activate it.
2) Then it will start working.

Details :

Simple configuration.
Working fine.

Tutorial

https://www.youtube.com/watch?v=k1UgX6q-TvM&feature=youtu.be

🔗 Joomla! Latest Extensions

#AccessSecurity #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 Qlue Facebook
▶️ Social Display

Version: 1.0.0
Developer: Qlue
License: GPLv2 or later
Type: Free download
Includes: Module
Compatibility: Joomla! 3.0

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Qlue Facebook is a free module for adding Facebook feeds to your Joomla site!


- Feeds from accounts or pages.
- Uses Joomla caching
- Customizable layout
- Custom layouts
- Free forever!

🔗 Joomla! Latest Extensions

#SocialDisplay #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 Qlue Modal
▶️ Popups & iFrames

Version: 1.0.0
Developer: Qlue
License: GPLv2 or later
Type: Free download
Includes: Module
Compatibility: Joomla! 3.0

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Qlue Modal is a free module for adding pop-up modals to your Joomla site.

🔗 Joomla! Latest Extensions

#PopupsiFrames #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 EB Messenger Chat
▶️ Live Support

Version: 1.0
Developer: Extnbakers
License: GPLv2 or later
Type: Free download
Includes: Module
Compatibility: Joomla! 3.0, Joomla! 4alpha

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

This Messenger Chat module can be used as live support via Facebook Messenger as it allows your website visitors to send messages directly to you or your agent's Facebook Messenger.

FEATURES:


- Compatible with Joomla 3.x.x and 4 Alpha
- Fully Responsive
- Compatible with all browsers and mobiles
- Configurable Chat Button Text, Background Color, and Text Color
- Configurable Chat Button Icon from predefined Icon sets or you can upload your custom icon
- Fully Flexible Button configuration - You can keep only ICON or only text OR choose both option text and icon
- Configurable FB Messenger Chat icon in multiple positions
- Configurable Popup header with Agent name, department, Image or Add your Custom HTML Text
- Configurable custom message for an agent that will be displayed on the chatbox.

🔗 Joomla! Latest Extensions

#LiveSupport #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 EB Whatsapp Chat
▶️ Live Support

Version: 1.0
Developer: Extnbakers
License: GPLv2 or later
Type: Free download
Includes: Module
Compatibility: Joomla! 3.0, Joomla! 4alpha

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

This Whatsapp Chat module can be used as LIVE SUPPORT via WHATSAPP as it allows your website visitors to send messages directly to you or your agent's Whatsapp.

FEATURES:


- Compatible with Joomla 3.x.x and 4 Alpha
- Fully Responsive
- Compatible with all browsers and mobiles
- Configurable Chat Button Text, Background Color, and Text Color
- Configurable Chat Button Icon from predefined Icon sets or you can upload your custom icon
- Fully Flexible Button configuration - You can keep only ICON or only text OR choose both option text and icon
- Configurable WhatsApp Chat icon in multiple positions
- Configurable Popup header with Agent name, department, Image or Add your Custom HTML Text
- Configurable custom message for an agent that will be displayed on the chatbox.
- Configurable Predefined user message that will be sent to the agent phone number
- Allow users to type their own messages before sending it to the agent phone number

🔗 Joomla! Latest Extensions

#LiveSupport #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 Qlue Weather
▶️ Weather

Version: 1.0.0
Developer: Qlue
License: GPLv2 or later
Type: Free download
Includes: Module
Compatibility: Joomla! 3.0

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Qlue Weather is a free module for providing weather information about any location to your visitors.


- World wide support
- Easy to setup
- Custom layouts supported
- Unit selection (imperial/metric)
- Free forever!

🔗 Joomla! Latest Extensions

#Weather #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 AA Snowfall for Christmas
▶️ Events

Version: 1.0.0
Developer: AA Extensions
License: GPLv2 or later
Type: Free download
Includes: Plugin
Compatibility: Joomla! 3.0, Joomla! 4alpha

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

A plugin that can create snowfall during the festive season. It's a simple plugin.

Features it has :

It works with any Pagebuilder and defaults Joomla website.
Works with any templates.
Nice Layout
Fully Responsive
Cross-browser support.
Simple and Friendly user interface.
Ease to use.


Supported Platform:

Joomla 3.x and Joomla 4.X

Note : Any issue let me know. Joomla latest version (3.x and 4.0) tested and working great 🙂


How to use :

1) Just install the plugin and activate it.
2) Then it will start working.

Details :


- Simple configuration.
- Working fine.


Tutorial :

https://www.youtube.com/watch?v=jOVDD2I39ow&feature=youtu.be

🔗 Joomla! Latest Extensions

#Events #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 LoginSecure Custom Code
▶️ Coding & Scripts Integration

Version: 1.0.6
Developer: LoginSecure {web} Design & Development
License: GPLv2 or later
Type: Paid download
Includes: Module
Compatibility: Joomla! 3.0, Joomla! 4alpha

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

With the LoginSecure Custom Code extensions, it has never been easier to apply custom code to your website. By utilizing Joomla's native module structure you can now add any type of CSS/JS/HTML to your website and only on the pages you need.

Extension features are:

Inside < head >

Add JS or CSS directly inside the < head > tags of your template.

Just before < /body >

Sometimes it is preferred to add that little bit of JS just before the closing of the < /body > tag. It works also really well for HTML.

Inline coding like a champ

When you just need a bit of custom code, right at a specific spot. Then just use the inline settings and add your HTML, CSS or JS. This code will then be rendered at the location of the module.

RokPad Editor

This extension automatically adapts itself in case you have the RokPad Editor installed. This editor makes it so much easier to write code in Joomla. Combining it with the LoginSecure Custom Code extension was only the natural thing to do.

Multiple modules on one page

This extension is made in such a way that you can add multiple of them within the same page.
Each module is completely standalone!

🔗 Joomla! Latest Extensions

#CodingScriptsIntegration #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 LoginSecure Slope Elements
▶️ Content Construction

Version: 1.1.1
Developer: LoginSecure {web} Design & Development
License: GPLv2 or later
Type: Paid download
Includes: Module
Compatibility: Joomla! 3.0, Joomla! 4alpha

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

The LoginSecure Slope Element extension makes a webpage instantly look better with a slope or otherwise known as a diagonal area. Apply a color, image or video background to make it, even more, stand out. And use your favorite Joomla editor to fill in the content.

Extension features are:

Visually interesting content

It's always a delight to see some non-straight elements in web design. Angled shapes and diagonal lines can create an interesting visual flow and add some unexpected excitement.

Simple configuration

When you are a little bit familiar with Joomla modules then working with this extension is going to be easy. Every option can be set from within the module with a few clicks and content can be filled in with your favorite Joomla editor.

Apply a visually stunning background

Use your videos or images as the background of the sloping element. Add a colored overlay on top of it with transparency to blend it in with the styling of your website. Or go oldskool and grab any color you wish to use for the background.

Force Boxed Content included for the Gantry 5 Framework

We added a little bonus option for users of the Gantry 5 Framework. This option allows you to show the content area of the module to be boxed while the background is flushed. This allows thus for full-width slopes but centered text. In other words, flushed with boxed content.

Multiple modules on one page

This extension is made in such a way that you can add multiple slopes elements within the same page and each of them with there own styling attached to it.
When adding multiple extensions right below each other you can create a nice ribbon effect.

🔗 Joomla! Latest Extensions

#ContentConstruction #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 LoginSecure Content
▶️ Content Construction

Version: 1.0.6
Developer: LoginSecure {web} Design & Development
License: GPLv2 or later
Type: Paid download
Includes: Module
Compatibility: Joomla! 3.0, Joomla! 4alpha

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

The LoginSecure Content extension allows you to add content everywhere on your website without any limitations to the styling. Are you frustrated with the default Joomla content module (mod_custom) and in search of a replacement? Then this is the extension for you! Now you can add eyecatchers like images or icons, headings, descriptions, click to call actions and up to ten individual mini content blocks.

Extension features are:

Eyecatchers

Make the content module immediately catch your visitor's eye by adding a beautiful eyecatcher. Choose between multiple icon families or upload/select your own images.
You can select where you want the eyecatcher to be visible and you can adjust all styling aspects of the eyecatcher within the module.

Fully customizable headers and descriptions

Headers and descriptions inherit your template styling as default but every aspect can be adjusted inside the module parameters.
No need to add styling to your stylesheet with this extension!

1200+ Icons to choose from or pick your own custom library

With the Font Awesome & Material Icons libraries, there are plenty of icons to choose from and if that is not enough you can always use your own custom icon library. All configurable from within the extension.

Click To Action

This extension incorporates the best practices for Click To Action elements. It has never been easier to direct your visitors to do a specific action
In the module parameters, you can set the module to display a link or make the entire module become one Click To Action call.

Highlight services or features with Items

Missing from the default mod_custom was the ability to highlight services or features on an efficient way without the need for a lot of CSS code.
This is eliminated when using this extension because you can add up to 10 items to showcase whatever you wish in any style you prefer.
Each item can have there own eyecatcher, heading, description and Click To Action setup.

Multiple modules on one page

What good would a content module be if you could only have one of them per page? Not very good to be honest!
Therefore we made this extension in such a way that you can add multiple of them within the same page and each of them with there own styling attached to it.
Each module is completely standalone!

Joomla Module Functionality

An extension like this is generally expected to be a plugin. But we decided to make it a module instead.
Therefore it can be added anywhere you want with Joomla's {loadposition} syntax.
Or set the position and assign it to specific menu items.

🔗 Joomla! Latest Extensions

#ContentConstruction #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 VM Cart Menu
▶️ VirtueMart extensions

Version: 1.0
Developer: Web-expert.gr
License: GPLv2 or later
Type: Free download
Includes: Plugin
Compatibility: Joomla! 3.0

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

The "VM Cart Menu" plugin for Virtuemart fixes the cart link and always adds the missing menu ID.

Some times Virtuemart (or third party modules) redirects to index.php?option=com_virtuemart&view=cart BUT there is a problem, the menu that is linked with the VM Cart is ignored, so if you have excluded a module from cart it will appear.

Also if you have SEF links enabled the cart link will not be converted to seo friendly URL.

This simple plugins take cares everything for you and always appends the ItemID (MenuID).

Plugin works only on GET method to allow AJAX requests to work.

Benefits:
-Cart will always linked with the menu
-Cart Link will be SEO Friendly (if you have enabled SEF)
-Module assignments will be work correctly

🔗 Joomla! Latest Extensions

#VirtueMartextensions #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 Force Password Reset
▶️ Access & Security

Version: 1.0.0
Developer: eclent
License: GPLv2 or later
Type: Free download
Includes: Plugin
Compatibility: Joomla! 3.0

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

With this plugin you can set a time validity for the passwords of your registered users. For example, if you set 30 days, every registered user can navigate in the website for 30 days from his last password reset (or from his register date). After 30 days the plugin redirect the user to the password reset page. User cannot navigate to other pages until he change his password.

Main features:


- Easy installation and configuration.
- Unlimited days can be set for password validity.
- Redirect to Joomla core or Community Builder profile edit page.
- Exclusions: you can exclude one or more user groups from the expiration of their passwords (such as Admins or Super Users).
- No new tables created in your DB.

🔗 Joomla! Latest Extensions

#AccessSecurity #NewlyJoomlaExtensions #JoomlaLatestExtensions #JED #JoomlaOrg

📣 @joomlanews