On Monday 2015-12-14, the Sucuri Blog posted an entry about a Critial 0-day remote code execution vulnerability in Joomla . That same day, a patch was made available by Joomla .
This hasn't gotten as much coverage as previous Joomla vulnerabilities, probably because there hasn't been reports of attacks in the wild like there was in a previous vulnerability in October 2015 .
As always, it's a good security practice to keep your software patched and up-to-date. Please keep this in mind with any operating system or application platform.
Dec 18th 2015
4 years ago