CVE-2019-12766

An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently filter or validate input of subfields. This leads to XSS attack vectors...

Joomla! < 3.9.7 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-12766

CVE-2019-12766 relates to Joomla! before 3.9.7, where the subform fieldtype fails to filter/validate input in subfields, enabling cross-site scripting (XSS) vectors. The issue is documented across multiple sources referencing Joomla! core before 3.9.7 and specifically the subform input validation...