Description
An issue was discovered in Joomla! before 3.9.6. The debug views of com_users do not properly escape user supplied data, which leads to a potential XSS attack vector.
Remediation
References
Related Vulnerabilities
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17308)
WordPress Plugin myFlash Remote File Include (1.10)
WordPress Plugin Facebook Button by BestWebSoft Cross-Site Scripting (2.53)
WordPress Plugin WP-RecentComments SQL Injection (2.0.7)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-0214)