2019-06-11 21:29:00 2019-06-12 17:29:00

An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently filter or validate input of subfields. This leads to XSS attack vectors.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Joomla Joomla! 3.8.13 (not an official CPE) Joomla Joomla! 3.8.12 Rc (not an official CPE) Joomla Joomla! 3.8.12 - (not an official CPE) Joomla Joomla! 3.8.12 (not an official CPE) Joomla Joomla! 3.8.11 Rc (not an official CPE) Joomla Joomla! 3.8.11 - (not an official CPE) Joomla Joomla! 3.8.11 (not an official CPE) Joomla Joomla! 3.8.10 (not an official CPE) Joomla Joomla! 3.8.9 Rc (not an official CPE) Joomla Joomla! 3.8.9 - (not an official CPE) Joomla Joomla! 3.8.9 (not an official CPE) Joomla Joomla! 3.8.8 Rc (not an official CPE) Joomla Joomla! 3.8.8 - (not an official CPE) Joomla Joomla! 3.8.8 (not an official CPE) Joomla Joomla! 3.8.7 Rc (not an official CPE) Joomla Joomla! 3.8.7 - (not an official CPE) Joomla Joomla! 3.8.7 (not an official CPE) Joomla Joomla! 3.8.6 Rc1 (not an official CPE) Joomla Joomla! 3.8.6 - (not an official CPE) Joomla Joomla! 3.8.6 (not an official CPE) Joomla Joomla! 3.8.5 Rc (not an official CPE) Joomla Joomla! 3.8.5 - (not an official CPE) Joomla Joomla! 3.8.5 (not an official CPE) Joomla Joomla! 3.8.4 Rc2 (not an official CPE) Joomla Joomla! 3.8.4 Rc (not an official CPE) Joomla Joomla! 3.8.4 - (not an official CPE) Joomla Joomla! 3.8.4 (not an official CPE) Joomla Joomla! 3.8.3 Rc (not an official CPE) Joomla Joomla! 3.8.3 - (not an official CPE) Joomla Joomla! 3.8.3 (not an official CPE) Joomla Joomla! 3.8.2 Rc (not an official CPE) Joomla Joomla! 3.8.2 - (not an official CPE) Joomla Joomla! 3.8.2 (not an official CPE) Joomla Joomla! 3.8.1 Rc (not an official CPE) Joomla Joomla! 3.8.1 (not an official CPE) Joomla Joomla! 3.8.0 Rc1 (not an official CPE) Joomla Joomla! 3.8.0 Beta1 (not an official CPE) Joomla Joomla! 3.8.0 - (not an official CPE) Joomla Joomla! 3.7.5 (not an official CPE) Joomla Joomla! 3.7.4 Rc1 (not an official CPE) Joomla Joomla! 3.7.4 Beta1 (not an official CPE) Joomla Joomla! 3.7.4 (not an official CPE) Joomla Joomla! 3.7.3 Rc2 (not an official CPE) Joomla Joomla! 3.7.3 Rc1 (not an official CPE) Joomla Joomla! 3.7.3 Beta1 (not an official CPE) Joomla Joomla! 3.7.3 (not an official CPE) Joomla Joomla! 3.7.2 (not an official CPE) Joomla Joomla! 3.7.1 Rc2 (not an official CPE) Joomla Joomla! 3.7.1 Rc1 (not an official CPE) Joomla Joomla! 3.7.1 (not an official CPE) Joomla Joomla! 3.7.0 Rc4 (not an official CPE) Joomla Joomla! 3.7.0 Rc3 (not an official CPE) Joomla Joomla! 3.7.0 Rc2 (not an official CPE) Joomla Joomla! 3.7.0 Rc1 (not an official CPE) Joomla Joomla! 3.7.0 Beta4 (not an official CPE) Joomla Joomla! 3.7.0 Beta3 (not an official CPE) Joomla Joomla! 3.7.0 Beta2 (not an official CPE) Joomla Joomla! 3.7.0 Beta1 (not an official CPE) Joomla Joomla! 3.7.0 Alpha2 (not an official CPE) Joomla Joomla! 3.7.0 Alpha1 (not an official CPE) Joomla Joomla! 3.7.0 (not an official CPE) Joomla Joomla! 3.6.5 (not an official CPE) Joomla Joomla! 3.6.4 (not an official CPE) Joomla Joomla! 3.6.3 Rc3 (not an official CPE) Joomla Joomla! 3.6.3 Rc2 (not an official CPE) Joomla Joomla! 3.6.3 Rc1 (not an official CPE) Joomla Joomla! 3.6.3 (not an official CPE) Joomla Joomla! 3.6.2 (not an official CPE) Joomla Joomla! 3.6.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.1 Rc1 (not an official CPE) Joomla Joomla! 3.6.1 (not an official CPE) Joomla Joomla! 3.6.0 Rc2 (not an official CPE) Joomla Joomla! 3.6.0 Rc (not an official CPE) Joomla Joomla! 3.6.0 Beta2 (not an official CPE) Joomla Joomla! 3.6.0 Beta1 (not an official CPE) Joomla Joomla! 3.6.0 Alpha (not an official CPE) Joomla Joomla! 3.6.0 (not an official CPE) Joomla Joomla! 3.9.0 - (not an official CPE) Joomla Joomla! 3.9.0 Alpha (not an official CPE) Joomla Joomla! 3.9.0 Beta (not an official CPE) Joomla Joomla! 3.9.0 Beta2 (not an official CPE) Joomla Joomla! 3.9.0 Beta3 (not an official CPE) Joomla Joomla! 3.9.0 Beta4 (not an official CPE) Joomla Joomla! 3.9.0 Rc (not an official CPE) Joomla Joomla! 3.9.0 Rc2 (not an official CPE) Joomla Joomla! 3.9.1 - (not an official CPE) Joomla Joomla! 3.9.1 Rc (not an official CPE) Joomla Joomla! 3.9.2 - (not an official CPE) Joomla Joomla! 3.9.2 Rc (not an official CPE) Joomla Joomla! 3.9.3 Rc1 (not an official CPE) Joomla Joomla! 3.9.4 (not an official CPE) Joomla Joomla! 3.9.4 Rc1 (not an official CPE) Joomla Joomla! 3.9.5 Rc1 (not an official CPE) Joomla Joomla! 3.9.6 - (not an official CPE) Joomla Joomla! 3.9.6 Rc1 (not an official CPE) Joomla Joomla! 3.9.6 Rc2 (not an official CPE)