Joomla! 2.5.x < 3.9.21 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.21. It is, therefore, affected by multiple vulnerabilities. - Lack of escaping in modlatestactions allows Cross-Site Scripting XSS attacks. CVE-2020-24599 - Lack of input...

Joomla 2.5.x < 3.9.21 Multiple Vulnerabilities (5821-joomla-3-9-21)

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.21. It is, therefore, affected by multiple vulnerabilities. - Lack of escaping in modlatestactions allows XSS attacks. CVE-2020-24599 - Lack of input validation in comcontent lea...

CVE-2020-24598

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...

CVE-2020-24598

CVE-2020-24598 is an open redirect vulnerability in Joomla! before 3.9.21, arising from insufficient input validation in the com_content vote feature. The initial descriptions and connected sources consistently describe an input-validation weakness leading to an open redirect, but no remediation ...