What is 3.9.23?
Joomla 3.9.23 contains seven security vulnerability fixes and addresses several errors, including:
Security issues fixed
com_ Finder ignores automatically recommended access levels
Disclose secrets on the global configuration page
mod_ random_ Path traversal in image
com_ SQL injection in users list view
User enumeration in backend login
com_ CSRF in privacy email export function
Multiple ACL violations in core view
Bug fix and improvement
To prepare Joomla for PHP 8 (to be released on November 26, 2020), Joomla 3.9.23 includes a number of fixes to ensure PHP 8 compatibility.
TinyMCE update
Fixed edit permissions for front end module
Fixed loss of transparency when cropping / resizing images
A validation rule was added for the redirection header field