Description

An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in mod_banners leads to a stored XSS vulnerability.

Remediation

References

CVE-2019-6264

Related Vulnerabilities

WordPress Plugin Simple Photo Gallery SQL Injection (1.7.9)

Squid Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2023-46847)

WordPress Plugin Gallery-Image and Video Gallery with Thumbnails SQL Injection (2.0.3)

WordPress Plugin Sell Downloads Arbitrary File Disclosure (1.0.1)

Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3223)

Severity

Medium

Classification

CVE-2019-6264 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities