Description
An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access.
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce Product Attachment Cross-Site Scripting (1.1.2)
WordPress Plugin WooCommerce Customers Manager Unspecified Vulnerability (26.6)
WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.10)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-14630)
phpMyAdmin Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4729)