CVE-2019-9714

MEDIUM 6.1CVE-2019-9714 · Published 12/03/2019 · updated 17/06/2026

In short

CVE-2019-9714 is a MEDIUM (CVSS 6.1) vulnerability affecting joomla! (joomla).
Chance of exploitation in the next 30 days (EPSS): 0.75%, higher than 55.1% of all vulnerabilities.
Fix: update to 3.9.4 or later.

Package	Affected versions	Patched versions
joomla! joomla	`≥ 3.0.0, < 3.9.4`	`3.9.4`

An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 3.0.0, < 3.9.4

3.9.4

More vulnerabilities in joomla!

See all →