In Joomla! before 3.9.19, incorrect input validation of the module tag option in com_modules allows XSS.
{ "cpes": [ "cpe:2.3:a:joomla:joomla!:*:*:*:*:*:*:*:*" ], "severity": "Medium" }
"https://github.com/bitnami/vulndb/tree/main/data/joomla/BIT-joomla-2020-13762.json"