medium6.1
CVE-2020-13761
In Joomla!
Impact
In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 3.0.1 before 3.9.19 Version 3.0.0 |