Joomla! 3.x < 3.9.4 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.9.4. It is, therefore, affected by multiple vulnerabilities: - A logic error exists in sample data plugins that allows remote attackers to gain unauthorized access to unspecified...

CVE-2019-9711

CVE-2019-9711 affects Joomla! versions before 3.9.4. The issue is an XSS vulnerability caused by lack of escaping in the item_title layout in edit views. This could allow an attacker to inject and execute script in a user’s browser. The documented impact is browser-based XSS; no in-built exploit ...