CVE-2020-13760: 
Joomla vulnerability analysis and mitigation

In Joomla! versions 3.7.0 through 3.9.18, a Cross-Site Request Forgery (CSRF) vulnerability was identified due to missing token checks in the com_postinstall component. The vulnerability was discovered on May 8, 2020, and was fixed on June 2, 2020, with the release of version 3.9.19 (Joomla Security).

The vulnerability stems from missing security token checks in the com_postinstall component of Joomla!, which could lead to Cross-Site Request Forgery attacks. The severity of this vulnerability was rated as 'Low' by the Joomla Security Strike Team (JSST) (Joomla Security).

The vulnerability could allow attackers to perform unauthorized actions through CSRF attacks, potentially compromising the security of affected Joomla! installations (CERT-FR).

The vulnerability requires user interaction to be exploited, as it is a CSRF-type vulnerability. No public exploits were reported in the wild at the time of disclosure (Joomla Security).

The recommended mitigation is to upgrade to Joomla! version 3.9.19 or later, which contains the security fix for this vulnerability (Joomla Security).