GHSA-v84j-vh7x-g7j6

ghsaUSosv

Joomla! XSS in Default Templates

view advisory published 2022-05-24Licence: CC-BY-4.0

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-16725USmedium6.1—
In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan