Sonrisas Pro 2.1.4

v2.1.4

• Security: Hardened the Gallery module to reject files resolving outside the temporary uploads folder when a module is saved (path traversal).
• Security: Hardened the Gallery module's upload folder protection to block PHP executable file types.

v2.1.3
Security

• Security: Fixed obsolete framework files not being removed during updates.

Added

• Added a warning in the Gallery module settings when the PHP "fileinfo" extension is missing.
• Added support for importing and exporting marker title and description in the Map module.

v2.1.2
Security

• Security: Fixed a critical arbitrary file deletion vulnerability in the Gallery Module.

Fixed

• Fixed double-clicking inside Gallery textareas so it no longer accidentally selects or deselects images.

v2.1.1
Security

• Fixed vulnerabilities in AJAX handling, including unauthenticated file access and SQL injection. High - CVE-2026-21627.

Added

• Added support for Facebook Reels in Video module.

Fixed

• Fixed Gallery module preventing uploads when the Gallery Maximum Files Allowed was set to a single file.
• Fixed Gallery module not outputting alt text when images opened in the lightbox.
• Fixed missing Module Position clear button.
• Fixed Some HTML attributes stripped when editing content in TinyMCE editor.
• Fixed PHP error when using PayPal Button module with SP Pagebuilder.
• Fixed Display Conditions would not load in rare cases.
• Fixed Video module to correctly load external URLs, including self-hosted video files (mp4, mov, ogg, webm).

Added

• Joomla 6 Native Support.

Fixed

• Smart Tags in menu titles not replaced when the main menu module is used.
• Broken Transifex link in the Translations section on the Dashboard page.
• Gallery Module failing to upload images from the Media > Path to Files Folder.
• Map Module editor becoming unresponsive when confirming a dialog outside the map and the “Add Marker” menu not toggling correctly.
• Accordion Module "Duplicate field FAQPage" error in Google Rich Results Tool.

Changed

• Improved Gallery Module media manager selection.

Fixed

• Unusable editor in Accordion Module after reordering items.
• Smart Tag ignoring --preparecustomfields option.
• Issue where a Smart Tag would return empty when the value equals 0.

Changed

• Changed {user.lastVisitDate} Smart Tag now uses DATE_FORMAT_LC5 format (Y-m-d H:i).
• Changed Video Module default height to "auto".
• Sets minimum required Joomla! version to 4.0.
• Sets minimum required PHP version to 7.4.

Added

• Auto responsiveness to Video Module when no height is set.

Fixed

• Inaccurate marker address may be displayed in Map Module.
• "Class ContactHelperRoute not found" PHP error when using ACF - Map in Contact component to populate Map Module.