Joomla Publisher component version 3.0.19 suffers from a persistent cross site scripting vulnerability.