[20200302] - Core - XSS in Protostar and Beez3
- Project: Joomla!
- SubProject: CMS
- Impact: Moderate
- Severity: Low
- Versions: 3.0.0-3.9.15
- Exploit type: XSS
- Reported Date: 2020-February-24
- Fixed Date: 2020-March-10
- CVE Number: CVE-2020-10242
Description
Inadequate handling of CSS selectors in the Protostar and Beez3 JavaScript allow XSS attacks.
Affected Installs
Joomla! CMS versions 3.0.0 - 3.9.15
Solution
Upgrade to version 3.9.16
Contact
The JSST at the Joomla! Security Centre....
- Details
- Category: Security Announcements
[20200301] - Core - CSRF in com_templates image actions
- Project: Joomla!
- SubProject: CMS
- Impact: Moderate
- Severity: Low
- Versions: 3.2.0-3.9.15
- Exploit type: CSRF
- Reported Date: 2020-February-06
- Fixed Date: 2020-March-10
- CVE Number: CVE-2020-10241
Description
Missing token checks in the image actions of com_templates causes CSRF vulnerabilities.
Affected Installs
Joomla! CMS versions 3.2.0 - 3.9.15
Solution
Upgrade to version 3.9.16
Contact
The JSST at the Joomla! Security Centre....
- Details
- Category: Security Announcements
Universal Slider for K2
Universal Slider for K2 with ten different unique layouts. Every layout generate a cool slideshow with photo, title, text, category, author, date and read more
Data Source
Source - k2 categories / k2 items / k2 tags
General settings
Exclude Items
Featured Items - Show / Hide /Show only Featured Items
Items Ordering
Slider Settings
Slider height at your choice or as full screen
Use loader Yes / No
Items limit (at your choice )
intro text limit (at your choice )
Show slide date Yes / No
Show slide category Yes / No
Show slide author Yes / No
- Details
- Category: Latest Extensions
VET Meeting - 4th March 2020
Minutes
Volunteer Engagement Team Meeting Agenda
- Details
- Category: JBlogs
