CVE-2019-6264: XSS
Published Jan 16, 2019
·Updated
An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in modbanners leads to a stored XSS vulnerability.
Affected Software
1 affected component
Joomla Joomla\!>=2.5.0<3.9.2
Event History
Jan 16, 2019
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Data Sourced
via NVD·08:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6264?
CVE-2019-6264 is considered a medium severity stored XSS vulnerability affecting Joomla! versions prior to 3.9.2.
2
How do I fix CVE-2019-6264?
To fix CVE-2019-6264, update Joomla! to version 3.9.2 or later.
3
What versions of Joomla! are affected by CVE-2019-6264?
Joomla! versions from 2.5.0 up to, but not including, 3.9.2 are affected by CVE-2019-6264.
4
What type of vulnerability is CVE-2019-6264?
CVE-2019-6264 is a stored cross-site scripting (XSS) vulnerability found in the Joomla! mod_banners extension.
5
Is user interaction required to exploit CVE-2019-6264?
Yes, user interaction is generally required to exploit the stored XSS vulnerability in CVE-2019-6264.