Description

An issue was discovered in Joomla! before 3.9.3. The "No Filtering" textfilter overrides child settings in the Global Configuration. This is intended behavior. However, it might be unexpected for the user because the configuration dialog lacks an additional message to explain this.

Remediation

References

CVE-2019-7739

Related Vulnerabilities

Plone CMS Missing Authentication for Critical Function Vulnerability (CVE-2020-35190)

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3463)

WordPress Plugin Site Reviews Cross-Site Scripting (2.15.2)

MySQL Other Vulnerability (CVE-2007-6304)

WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions SQL Injection (2.9.11)

Severity

Medium

Classification

CVE-2019-7739 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities