Description
An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output, disclosing the current values.
Remediation
References
Related Vulnerabilities
WordPress Plugin RSVPMaker SQL Injection (9.2.5)
ReviveAdserver 7PK - Security Features Vulnerability (CVE-2016-9470)
WordPress Plugin Testimonial WordPress-AP Custom Testimonial Unspecified Vulnerability (1.4.7)
WordPress Plugin Schreikasten 'name' or 'contact' Field Cross-Site Scripting (0.14.13)
Dolibarr Improper Authentication Vulnerability (CVE-2017-8879)