Description
In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not block HTML inputs for Guest users.
Remediation
References
Related Vulnerabilities
WordPress Plugin ThinkTwit Cross-Site Scripting (1.7.0)
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.13)
WordPress 3.1.2 Multiple Vulnerabilities (3.0.1 - 3.1.2)
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-2687)
WordPress Plugin Link Library Cross-Site Scripting (5.9.5.5)