CVE-2019-9714

An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS.

Date published : 2019-03-12

http://www.securityfocus.com/bid/107369

https://developer.joomla.org/security-centre/774-20190303-core-xss-in-media-form-field