Šarūnas Paulauskas

**Name of the Vulnerable Software and Affected Versions** Joomla! versions 3.0.0 through 3.9.24 **Description** An issue was discovered where extracting a specifically crafted zip package could write files outside of the intended path. **Recommendations** For Joomla! versions 3.0.0 through 3.9.24, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions 3.9.0 through 3.9.23 **Description** The issue is related to a lack of escaping in the `aria-label` attribute of the `mod breadcrumbs` module, which allows XSS attacks. **Recommendations** For Joomla! versions 3.9.0 through 3.9.23, update to a version that includes the fix for this issue to prevent XSS attacks.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions 3.1.0 through 3.9.23 **Description** The issue is related to the lack of escaping of image-related parameters in multiple com tags views, which can lead to XSS attack vectors. **Recommendations** For Joomla! versions 3.1.0 through 3.9.23, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.