PT-2021-16925 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.26 Description: An issue was discovered where HTML was missing in the executable block list of MediaHelper::canUpload, leading to XSS attack vectors. Recommendations: For Joomla! versions 3.0.0 through 3.9.2...