---
title: "[20190103] - Core - Stored XSS issue in the Global Configuration textfilter settings"
description: "We help designers, developers, hobbyists and business owners get the most out of the Joomla CMS.  Join us at our free monthly meetups, and let us help you with your Joomla projects."
url: "https://www.joomlalondon.co.uk/official-joomla-announcements/20190103-core-stored-xss-issue-in-the-global-configuration-textfilter-settings"
date: "2026-09-09T15:24:02+00:00"
language: "en-GB"
---

#  \[20190103\] - Core - Stored XSS issue in the Global Configuration textfilter settings

- **Project:** Joomla!
- **SubProject:** CMS
- **Impact:** Low
- **Severity:** Low
- **Versions:** 2.5.0 through 3.9.1
- **Exploit type:** XSS
- **Reported Date:** 2018-November-29
- **Fixed Date:** 2019-January-15
- **CVE Number:** [CVE-2019-6263](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6263)

### Description

Inadequate checks at the Global Configuration Text Filter settings allowed a stored XSS.

### Affected Installs

Joomla! CMS versions 2.5.0 through 3.9.1

### Solution

Upgrade to version 3.9.2

### Contact

The JSST at the [Joomla! Security Centre](https://developer.joomla.org/security-centre.html "Contact the JSST").

**Reported By: Sébastien Poirier**Read more  [http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/fL4-7BPvqmg/762-20190103-core-stored-xss-issue-in-the-global-configuration-textfilter-settings.html](http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/fL4-7BPvqmg/762-20190103-core-stored-xss-issue-in-the-global-configuration-textfilter-settings.html "[20190103] - Core - Stored XSS issue in the Global")

## Schema

```json
{ "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Start", "item": "https://www.joomlalondon.co.uk" }, { "@type": "ListItem", "position": 2, "name": "Official Joomla! Announcements", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements" }, { "@type": "ListItem", "position": 3, "name": "[20190103] - Core - Stored XSS issue in the Global Configuration textfilter settings", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements/20190103-core-stored-xss-issue-in-the-global-configuration-textfilter-settings" } ] }
```