medium6.1
CVE-2019-12766
An issue was discovered in Joomla!
Impact
An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently filter or validate input of subfields. This leads to XSS attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 3.6.0 through 3.9.6 |