Description
An issue was discovered in Joomla! before 3.9.7. The update server URL of com_joomlaupdate can be manipulated by non Super-Admin users.
Remediation
References
Related Vulnerabilities
WordPress Plugin Eventify-Simple Events 'fetcheventdetails.php' SQL Injection (1.7.f)
silverstripeCMS Session Fixation Vulnerability (CVE-2022-24444)
WordPress Plugin Simple Download Monitor Cross-Site Scripting (3.9.10)
WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.3.0)
WordPress Plugin Shopping Cart & eCommerce Store Arbitrary File Upload (3.0.8)