Description

An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS.

Remediation

References

CVE-2019-9714

Related Vulnerabilities

Caddy Web Server URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-28923)

phpMyFAQ Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) Vulnerability (CVE-2023-1758)

MySQL CVE-2020-2763 Vulnerability (CVE-2020-2763)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1509)

WordPress Plugin Page Builder by SiteOrigin Cross-Site Scripting (2.0.4)

Severity

Medium

Classification

CVE-2019-9714 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities