Joomla! Core 3.9.x Cross-Site Request Forgery (3.9.0 - 3.9.22)
Description
Joomla! Core is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. Joomla! Core versions 3.9.x ranging from 3.9.0 and up to and including 3.9.22 are vulnerable.
Remediation
Update to Joomla! Core version 3.9.23 or latest