Description
An issue was discovered in Joomla! before 3.9.3. Inadequate checks at the Global Configuration helpurl settings allowed stored XSS.
Remediation
References
Related Vulnerabilities
WordPress Plugin Easy Digital Downloads Attach Accounts to Orders Cross-Site Scripting (2.0.1)
PHP Address Book Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-2778)
WordPress Plugin IMDb Profile Widget Local File Inclusion (1.0.8)
WordPress Cleartext Storage of Sensitive Information Vulnerability (CVE-2017-14990)
WordPress Plugin Polo Video Gallery-Best wordpress video gallery Cross-Site Scripting (1.2)