Description
An issue was discovered in Joomla! before 3.9.6. The debug views of com_users do not properly escape user supplied data, which leads to a potential XSS attack vector.
Remediation
References
Related Vulnerabilities
MySQL CVE-2022-21323 Vulnerability (CVE-2022-21323)
WordPress Plugin Web Application Firewall-website security Unspecified Vulnerability (2.1.2)
PHP Out-of-bounds Read Vulnerability (CVE-2017-9224)
Apache Tomcat Deserialization of Untrusted Data Vulnerability (CVE-2020-9484)
Liferay Portal Missing Authorization Vulnerability (CVE-2025-43788)