Description

An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration.

Remediation

References

CVE-2020-11890

Related Vulnerabilities

Apache HTTP Server DEPRECATED: Code Vulnerability (CVE-2015-3183)

WordPress Plugin Ibtana-Ecommerce Product Addons Cross-Site Scripting (0.2.3)

PHP Address Book Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1912)

Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-4066)

Drupal Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2025-13080)

Severity

Medium

Classification

CVE-2020-11890 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities