Description

An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading to various potential attack vectors.

Remediation

References

CVE-2020-10238

Related Vulnerabilities

TYPO3 Improper Input Validation Vulnerability (CVE-2011-4902)

MySQL CVE-2019-2743 Vulnerability (CVE-2019-2743)

WordPress Plugin Login or Logout Menu Item Security Bypass (1.1.1)

MySQL CVE-2022-21604 Vulnerability (CVE-2022-21604)

WordPress Plugin WP FuneralPress Multiple Cross-Site Scripting Vulnerabilities (1.1.6)

Severity

High

Classification

CVE-2020-10238 CWE-668 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities