BIT-joomla-2020-13761

vendorUSosv

view advisory published 2025-04-03Licence: per source

In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-13761US	medium6.1	1.01% (63rd)	—	2020-06-02
In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS.

references

External citations — patches, advisories, analysis.

https://developer.joomla.org/security-centre/813-20200601-core-xss-in-modules-heading-tag-optionADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2020-13761WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan