medium6.1
CVE-2019-16725
In Joomla!
Impact
In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 3.0.0 before 3.9.12 |