Description An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS. Remediation References CVE-2019-9714 Related Vulnerabilities Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.37) WordPress Plugin Easy Forms for Mailchimp Cross-Site Scripting (5.0.6) WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.5.7) PHP Other Vulnerability (CVE-2007-1412) SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1227) Severity Medium Classification CVE-2019-9714 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities