Description
An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input validation, leading to XSS.
Remediation
References
Related Vulnerabilities
Joomla! Core Security Bypass (1.5.0 - 3.8.12)
Python NULL Pointer Dereference Vulnerability (CVE-2019-5010)
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.15)
Roundcube Incorrect Resource Transfer Between Spheres Vulnerability (CVE-2026-35540)
WordPress Plugin WooCommerce Help Scout Arbitrary File Upload (2.9)