writeups.xyz / Joomla Password Reset Vulnerability And A Stored XSS For Full Compromise

Submitter : c2a

Date: 7 June 2021

Bounty : undisclosed

Vulnerabilities :

• Password Reset
• Stored XSS
• Privilege Escalation
• RCE
• Security Code Review

Programs :

• Undisclosed

Authors :

• Adrian Tiron (@Adrian__t)

Link :
https://fortbridge.co.uk/research/joomla-password-reset-vulnerability-and-stored-xss-for-full-compromise/