In Joomla! before 3.9.19, missing token checks in com_postinstall lead to CSRF.
{ "cpes": [ "cpe:2.3:a:joomla:joomla!:*:*:*:*:*:*:*:*" ], "severity": "High" }
"https://github.com/bitnami/vulndb/tree/main/data/joomla/BIT-joomla-2020-13760.json"