Description

An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration.

Remediation

References

CVE-2020-11890

Related Vulnerabilities

WordPress Plugin Conditional Payments for WooCommerce Cross-Site Request Forgery (2.3.1)

ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9786)

WordPress Plugin CM Download Manager Arbitrary File Upload (2.8.5)

WordPress Plugin DM Albums Multiple File Deletion Vulnerabilities (2.1)

LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-56421)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2020-11890