CVE-2019-12766

medium

Description

An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently filter or validate input of subfields. This leads to XSS attack vectors.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4350

https://developer.joomla.org/security-centre/784-20190602-core-xss-in-subform-field

http://www.securityfocus.com/bid/108735

Details

Source: Mitre, NVD

Published: 2019-06-11

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N