[20190301] - Core - XSS in com_config JSON handler - Applicacious

[20190301] – Core – XSS in com_config JSON handler

  • Project: Joomla!
  • SubProject: CMS
  • Impact: Low
  • Severity: Low
  • Versions: 3.2.0 through 3.9.3
  • Exploit type: XSS
  • Reported Date: 2019-March-04
  • Fixed Date: 2019-March-12
  • CVE Number: CVE-2019-9712

Description

The JSON handler in com_config lacks input validation, leading to XSS vulnerability.

Affected Installs

Joomla! CMS versions 3.2.0 through 3.9.3

Solution

Upgrade to version 3.9.4

Contact

The JSST at the Joomla! Security Centre.

  • in Blog
  • by
  • March 12, 2019
  • Comments Off on [20190301] – Core – XSS in com_config JSON handler

Comments are closed.

%d bloggers like this: