Description An issue was discovered in Joomla! before 3.9.7. The CSV export of com_actionslogs is vulnerable to CSV injection. Remediation References CVE-2019-12765 Related Vulnerabilities Joomla Inadequate Encryption Strength Vulnerability (CVE-2011-3629) WordPress Plugin Realty by BestWebSoft Cross-Site Scripting (1.0.9) GlassFish Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000029) WordPress 4.2.x PHP Object Injection (4.2 - 4.2.29) WordPress Plugin Visualizer:Tables and Charts Manager for WordPress SQL Injection (3.11.1) Severity Critical Classification CVE-2019-12765 CWE-1236 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities