Joomla! Core 3.x.x Cross-Site Request Forgery (3.0.0 - 3.9.26)
Description
Joomla! Core is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. Joomla! Core versions 3.x.x ranging from 3.0.0 and up to and including 3.9.26 are vulnerable.
Remediation
Update to Joomla! Core version 3.9.27 or latest