CVE-2019-9712

An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input validation, leading to XSS.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-03-12

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Joomla! (Joomla)

References

• http://www.securityfocus.com/bid/107374
• https://developer.joomla.org/security-centre/772-20190301-core-xss-in-com-config-json-handler