Phil Keeble

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.9.7 **Description** An issue was discovered in the CSV export of com actionslogs, which is vulnerable to CSV injection. **Recommendations** For versions prior to 3.9.7, update to version 3.9.7 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.9.6 **Description** A potential XSS attack vector exists due to the debug views of com users not properly escaping user-supplied data. **Recommendations** For versions prior to 3.9.6, update to version 3.9.6 or later to resolve the issue.