PT-2019-19814 · Open Source Matters · Joomla!

Fouad Maakor · Published 2019-03-12 · Updated 2019-03-15 · CVE-2019-9711

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.4

Description An issue was discovered that leads to XSS due to the lack of escaping in the item title layout in edit views.

Recommendations For versions prior to 3.9.4, update to version 3.9.4 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-9711

Affected Products

Joomla!

References · 5

• https://osv.dev/vulnerability/CVE-2019-9711 · Vendor Advisory
• https://developer.joomla.org/security-centre/773-20190302-core-xss-in-item-title-layout · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9711 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9711 · Note
• http://securityfocus.com/bid/107371 · Note