Description
An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS.
Remediation
References
Related Vulnerabilities
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.14)
WordPress Plugin WP-Live Chat by 3CX Arbitrary File Upload (8.0.31)
Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-32780)
WordPress Plugin SS Downloads Multiple Cross-Site Scripting Vulnerabilities (1.4.4.1)
WordPress Plugin Britetechs Companion Malicious Code (2.2.7)