Hi,
Thanks for reporting this potential issue. I've deleted the issue contents and it will be reviewed by our security team. Please note there's a private form that's well publicised for submitting issues outside of GitHub. https://developer.joomla.org/security/contact-the-team.html Please use this in the future for submitting any potential security issues as it also allows us to contact you about the results of our investigation

@wilsonge this issue must be delete, now Github let you see the edition a comment have. So, the text still here, and anybody can look it.

GitHub doesn't support deleting issues.

I'm so sorry, I have sent a request to delete this.

GitHub Reply:
Thanks for writing in to GitHub Support!

While I can't make any promises, we can definitely investigate the possibility of deleting that issue.

In order to do so, we need to receive contact from an email address associated with a GitHub account that owns or has admin privileges over the repository in question. I'm afraid the email address you're writing from is not associated with a GitHub account that has these privileges over joomla/joomla-cms.

If you can write in from an email address associated with this repository or request an owner/admin contact us we'll certainly do our best to process your request.

All the best,
Lesley

@360CodeSafe can you drop me a line at security@joomla.org - thanks!