An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings allowed stored XSS.

JSST reports :

Inadequate escaping in mod_banners leads to a stored XSS vulnerability.

Inadequate escaping in com_contact leads to a stored XSS vulnerability

Inadequate checks at the Global Configuration Text Filter settings allowed a stored XSS.

Inadequate checks at the Global Configuration helpurl settings allowed a stored XSS.

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities :

 - Stored XSS in mod_banners affects Joomla 2.5.0 through 3.9.1

 - Stored XSS in com_contact affects Joomla 2.5.0 through 3.9.1

 - Stored XSS issue in the Global Configuration textfilter settings affects Joomla 2.5.0 through 3.9.1

 - Stored XSS issue in the Global Configuration help url affects Joomla 2.5.0 through 3.9.1

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.9.2. It is, therefore, affected by multiple stored XSS vulnerabilities as a result of inadequate escaping in mod_banners and com_contacts, as well as inadequate checks in global configuration text filter and global configuration helpurl settings.

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
121273	FreeBSD : joomla3 -- vulnerabilitiesw (6aa398d0-1c4d-11e9-96dd-a4badb296695)	Nessus	FreeBSD Local Security Checks	medium
98520	Joomla! 2.5.x < 3.9.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
121188	Joomla! < 3.9.2 Multiple Stored XSS Vulnerabilities	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2019-6263

medium

Tenable Plugins

medium

medium

medium