Description
An issue was discovered in Joomla! 2.5.0 through 3.9.22. The autosuggestion feature of com_finder did not respect the access level of the corresponding terms.
Remediation
References
Related Vulnerabilities
WordPress Plugin Bliss Gallery Arbitrary File Upload (2.3)
Drupal Core 5.x Multiple Security Bypass Vulnerabilities (5.0 - 5.22)
WordPress Plugin BulletProof Security Cross-Site Scripting (.47)
WordPress Plugin YITH WooCommerce Wishlist Unspecified Vulnerability (2.0.6)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7449)