CVE-2019-16725 - In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates

MEDIUM

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates

Published Sep 24, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 0.67%

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://developer.joomla.org/security-centre/791-20190901-core-xss-in-logo-parameter-of-default-templates.html		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5313		Advisory
https://github.com/advisories/GHSA-v84j-vh7x-g7j6		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-16725