medium4.8Public exploit code
CVE-2019-6263
An issue was discovered in Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Core 3.9.1 - Persistent Cross-Site Scripting in Global Configuration Textfilter Settings2019-01-18 · webapps · php
Impact
An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings allowed stored XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 2.5.0 before 3.9.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106638
- https://developer.joomla.org/security-centre/762-20190103-core-stored-xss-issue-in-the-global-configuration-textfilter-settings
- https://www.exploit-db.com/exploits/46200/
- http://www.securityfocus.com/bid/106638
- https://developer.joomla.org/security-centre/762-20190103-core-stored-xss-issue-in-the-global-configuration-textfilter-settings
- https://www.exploit-db.com/exploits/46200/