Managed hosting company
WiredTree has issued a warning about a possible vulnerability in the Joomla Content Management System (CMS). WiredTree, which has headquarters in Chicago, Illinois, United States, offers a range of services including virtual, hybrid, and dedicated hosting. The company prides itself on using the “highest-performing technologies” including “SSD-driven hardware”. It recommends that Joomla users immediately upgrade their installations to the current version of Joomla, which at the time of going to press was 3.4.7.
Joomla allows users to setup and manage websites with minimal effort. It is an Open Source (OS) Content Management System (CMS) which ranks alongside WordPress and Drupal as one of the world's leading CMS solutions. Since being part of the Mambo project in the 1990s, Joomla has transitioned into a CMS option that can manage large corporate sites as well as individual blogs. It does not require coding and users add a wide range of modules to the core Joomla software to add website functionality. According to WiredTree, Joomla is subject to a remote code execution vulnerability that was announced in last week’s PC enthusiast's resource Ars Technica.
The execution vulnerability could impact all Joomla versions prior to version 3.4.6 and WiredTree recommends users immediately upgrade their systems. Users of versions 1.5.X and 2.5.x of Joomla can utilize “hot-fixes” provided by Joomla developers, but WiredTree urges these users to upgrade to “actively maintained versions of the CMS” when they can.
“As a web hosting company, we support a great many clients that use Joomla because it’s an excellent content management system,” explained WiredTree’s President Zac Cogswell. “But we feel that because the vulnerability is widespread and is being actively exploited, it’s important to get the news out to as many Joomla users as we can — update your website immediately!”
Are you a Joomla user? Have you upgraded your site? Let us know your thoughts. Add your comments below.
