ASA-2019-00079 – Joomla: Stored XSS issue in the Global Configuration help url


Allele Security Alert

ASA-2019-00079

Identifier(s)

ASA-2019-00079, CVE-2019-7741

Title

Stored XSS issue in the Global Configuration help url

Vendor(s)

Open Source Matters, Inc

Product(s)

Joomla

Affected version(s)

Joomla 2.5.0 through 3.9.2

Fixed version(s)

Joomla 3.9.3

Proof of concept

Unknown

Description

Inadequate checks at the Global Configuration helpurl settings allowed a stored XSS.

Technical details

Unknown

Credits

Antonin Steinhauser

Reference(s)

Security Announcements
https://developer.joomla.org/security-centre.html

CVE-2019-7741
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7741

CVE-2019-7741
https://nvd.nist.gov/vuln/detail/CVE-2019-7741

If there is any error in this alert or you wish a comprehensive analysis, let us know.

Last modified: February 13, 2019

We are not responsible for any data loss, device corruption or any other type of issue due to the use of any information mentioned in our security alerts.