CVE-2020-13761
In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS.
Published: 2020-06-02 · CVSS: Unscored
In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7