CVE-2020-13762: 
Joomla vulnerability analysis and mitigation

In Joomla! before version 3.9.19, a Cross-Site Scripting (XSS) vulnerability was discovered due to incorrect input validation of the module tag option in com_modules. The vulnerability was assigned CVE-2020-13762 and was reported on May 6, 2020, with a fix released on June 2, 2020. The vulnerability affects Joomla! versions from 3.0.0 to 3.9.18 (Vendor Advisory).

The vulnerability is classified as a Cross-Site Scripting (XSS) issue (CWE-79) with a CVSS v3.1 Base Score of 6.1 (Medium), and vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. The vulnerability stems from improper input validation in the module tag option within the com_modules component (NVD).

The XSS vulnerability could allow attackers to inject malicious scripts that would execute in users' browsers when viewing affected pages. This could lead to theft of sensitive information, session hijacking, or other client-side attacks (NVD).

The vulnerability requires user interaction and can be exploited remotely without authentication. The attack complexity is considered low, making it relatively straightforward to exploit (NVD).

The recommended mitigation is to upgrade to Joomla! version 3.9.19 or later, which contains the security fix for this vulnerability (Vendor Advisory).