CVE-2020-24599: 
Joomla vulnerability analysis and mitigation

A cross-site scripting (XSS) vulnerability was discovered in Joomla! versions 3.9.0 through 3.9.20, identified as CVE-2020-24599. The vulnerability was reported on August 21, 2020, and fixed on August 25, 2020, affecting the mod_latestactions module due to insufficient escaping of user input (Joomla Security).

The vulnerability exists due to a lack of proper escaping in the mod_latestactions module of Joomla!, which could allow for XSS attacks. The severity of this vulnerability was rated as Low to Moderate according to Joomla's security assessment (Joomla Security).

The vulnerability could allow attackers to execute cross-site scripting attacks against affected Joomla! installations, potentially leading to the injection and execution of malicious client-side scripts (CERT-FR).

The vulnerability requires an attacker to exploit the lack of escaping in the mod_latestactions module. No specific details about exploitation in the wild have been publicly reported (CVE Mitre).

The vulnerability was patched in Joomla! version 3.9.21. Users of affected versions are advised to upgrade to this version or later to mitigate the security risk (Joomla Security).