CVE-2019-16725

CVE-2019-16725 affects Joomla! 3.x before 3.9.12. The vulnerability arises from inadequate escaping in the logo parameter of the default templates, enabling cross-site scripting (XSS). The NVD records CVSS v3.1 base score 6.1 (NETWORK, LOW ATTACK COMPLEXITY, UI REQUIRED, Privileges NONE) and CVSS...