An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration helpurl settings allowed stored XSS.
{ "versions": [ { "introduced": "2.5.0" }, { "fixed": "3.9.2" } ] }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6262.json"