Joomla! version 3.9.1 suffers from a persistent cross site scripting vulnerability in the global configuration textfilter settings. Continue reading...