CVE-2020-13760

In Joomla! before 3.9.19, missing token checks in compostinstall lead to CSRF...

CVE-2020-13760

CVE-2020-13760 affects Joomla! versions prior to 3.9.19 due to missing token checks in com_postinstall, enabling CSRF. Multiple connected sources (Red Hat, OSV, OpenVAS/Nessus entries) corroborate the description. CVSS‑3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 (H...