---
title: "[20190204] - Core - Stored XSS issue in the Global Configuration help url #2"
description: "We help designers, developers, hobbyists and business owners get the most out of the Joomla CMS.  Join us at our free monthly meetups, and let us help you with your Joomla projects."
url: "https://www.joomlalondon.co.uk/official-joomla-announcements/20190204-core-stored-xss-issue-in-the-global-configuration-help-url-2"
date: "2026-09-09T15:24:09+00:00"
language: "en-GB"
---

#  \[20190204\] - Core - Stored XSS issue in the Global Configuration help url #2

- **Project:** Joomla!
- **SubProject:** CMS
- **Impact:** Low
- **Severity:** Low
- **Versions:** 2.5.0 through 3.9.2
- **Exploit type:** XSS
- **Reported Date:** 2019-January-16
- **Fixed Date:** 2019-February-12
- **CVE Number:** [CVE-2019-7741](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7741)

### Description

Inadequate checks at the Global Configuration helpurl settings allowed a stored XSS.

### Affected Installs

Joomla! CMS versions 2.5.0 through 3.9.2

### Solution

Upgrade to version 3.9.3

### Contact

The JSST at the [Joomla! Security Centre](https://developer.joomla.org/security-centre.html "Contact the JSST").

Antonin SteinhauserRead more  [http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/3OVpsR6Ape0/768-20190204-core-stored-xss-issue-in-the-global-configuration-help-url-2.html](http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/3OVpsR6Ape0/768-20190204-core-stored-xss-issue-in-the-global-configuration-help-url-2.html "[20190204] - Core - Stored XSS issue in the Global")

## Schema

```json
{ "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Start", "item": "https://www.joomlalondon.co.uk" }, { "@type": "ListItem", "position": 2, "name": "Official Joomla! Announcements", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements" }, { "@type": "ListItem", "position": 3, "name": "[20190204] - Core - Stored XSS issue in the Global Configuration help url #2", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements/20190204-core-stored-xss-issue-in-the-global-configuration-help-url-2" } ] }
```