Description
In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | joomla/joomla-cms | >= 3.0.0, < 3.9.12 | 3.9.12 | GHSA-v84j-vh7x-g7j6 |