CVE-2019-6263
MEDIUMJoomla! < 3.9.2 - Stored Cross-Site Scripting in Global Configuration Text Filter Settings
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2019-6263. PoCs published by Praveen Sutar, praveensutar.
AI-analyzed exploit summary This is a working proof-of-concept for a stored XSS vulnerability in Joomla's Global Configuration Text Filter settings. The exploit demonstrates how an attacker can inject malicious JavaScript payloads into the configuration, which are then executed when the page is accessed.
Description
An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings allowed stored XSS.
Exploits (2)
This is a working proof-of-concept for a stored XSS vulnerability in Joomla's Global Configuration Text Filter settings. The exploit demonstrates how an attacker can inject malicious JavaScript payloads into the configuration, which are then executed when the page is accessed.
The repository contains only a README.md file with minimal content, lacking any exploit code or technical details for CVE-2019-6263. It appears to be a placeholder or incomplete submission.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N