Open Source Matters · Joomla! · CVE-2020-13760
**Name of the Vulnerable Software and Affected Versions**
Joomla! versions prior to 3.9.19
**Description**
The issue is related to missing token checks in the com postinstall component, which leads to Cross-Site Request Forgery (CSRF). CSRF is an attack where an attacker tricks a user into performing unintended actions on a web application that the user is authenticated to.
**Recommendations**
For versions prior to 3.9.19, update to version 3.9.19 or later to resolve the issue. As a temporary workaround, consider restricting access to the com postinstall component to minimize the risk of exploitation.