BIT-JOOMLA-2020-13761

In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS...

Joomla! Articles - Newsflash and Articles - Categories Modules Cross-Site Scripting Vulnerabilities

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS.Articles - Newsflash is one of the Flash content extension module.Articles - Categories is one of the article classification module. A cross-site...

PT-2020-13662 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.19 Description: The issue is related to a lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules, which allows for cross-site scripting XSS...