Description
An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the rules field of the JForm API leads to a XSS vulnerability.
Remediation
References
Related Vulnerabilities
WordPress Plugin VikBooking Hotel Booking Engine & PMS Multiple Vulnerabilities (1.5.3)
WordPress Plugin Merge+Minify+Refresh Cross-Site Request Forgery (1.10.6)
WordPress Plugin WooCommerce Amazon Affiliates Multiple Vulnerabilities (8.0)
SharePoint CVE-2024-38227 Vulnerability (CVE-2024-38227)
Sqlite NULL Pointer Dereference Vulnerability (CVE-2020-35525)