CVE-2020-13761
In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS.
Paquets affectés
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.9.19"}]}]
Références
- advisory developer.joomla.org
- web nvd.nist.gov