vulnerability

Joomla!: [20200601] - Core - XSS in modules heading tag option (CVE-2020-13761)

Try Surface Command
Back to search
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Jun 3, 2020
Added
Jun 3, 2020
Modified
Aug 11, 2025

Description

In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS.

Solution

joomla-upgrade-3_9_19

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today