Description
An issue was discovered in Joomla! 2.5.0 through 3.9.27. CMS functions did not properly termine existing user sessions when a user's password was changed or the user was blocked.
Remediation
References
Related Vulnerabilities
WordPress Plugin Spiffy Calendar Cross-Site Scripting (3.2.0)
WordPress Plugin WordPress Photo Gallery by Gallery Bank Unspecified Vulnerability (4.0.48)
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-2922)
WordPress Plugin Trust Form Cross-Site Scripting (2.0)
WordPress Plugin Appointment Booking Calendar Cross-Site Scripting (1.3.34)