Description An issue was discovered in Joomla! before 3.9.4. The item_title layout in edit views lacks escaping, leading to XSS. Remediation References CVE-2019-9711 Related Vulnerabilities WordPress Plugin Virtue/Pinnacle ToolKit Unspecified Vulnerability (2.5) WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner 'mosmsg' and 'option' Parameters Cross-Site Scripting Vulnerabilities (3.0) WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (4.7) Apache 2.x version older than 2.2.10 jQuery Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2019-11358) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2019-9711