Fouad Maakor

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.9.4 **Description** An issue was discovered that leads to XSS due to the lack of escaping in the item title layout in edit views. **Recommendations** For versions prior to 3.9.4, update to version 3.9.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.9.4 **Description** An issue was discovered in the media form field, which lacks escaping, leading to a cross-site scripting (XSS) issue. **Recommendations** For versions prior to 3.9.4, update to version 3.9.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.8.12 **Description** The issue is related to inadequate output filtering on the user profile page, which could lead to a stored XSS attack. **Recommendations** For versions prior to 3.8.12, update to version 3.8.12 or later to resolve the issue.