An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of com_templates lead to CSRF.

Published Mar 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre