Visforms 6.2.0
Date: June 29, 2026
Stability: Stable
Compatibility: PHP 8.0, 8.1, 8.2, 8.3, 8.4, 8.5
System Requirements: Joomla 6
New Features
Bugfixes
Improvements
- PHP 8.5 compatibility.
- Extensive revision of language tags and consolidation of translations.
- Layout revision of the data view menu configuration.
Visforms 6.2.1
Date: August 13, 2026
Stability: Stable
Compatibility: PHP 8.0, 8.1, 8.2, 8.3, 8.4, 8.5
System Requirements: Joomla 6
Bugfixes
- File system: Duplicate files on case-sensitive file systems.
- Visforms plugin: The Visforms action log plugin is not compatible with Joomla 6.
- Date field: The calendar icon sometimes fails to appear for conditional date fields.
- Date field: Unable to access the checkInputs property on pages with multiple forms if at least one form contains a date field and at least one form does not.
Security
- AI-assisted vulnerability remediation by security researcher Yukusawa18.
- Arbitrary PHP creation and raw write leads to RCE.
- Arbitrary file deletion through path traversal, missing authorization, and missing CSRF protection.
- Bypass of form-edit authorization and can redirect future form submissions to an attacker-selected mailbox.
- Bypass of the Joomla core.create permission.
- Unauthenticated verification-mail and verification-table amplification for arbitrary form IDs.
- External redirect through the submitted return parameter on an invalid form submission.