In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not block HTML inputs for Guest users.Referenceshttps://developer.joomla.org/security-centre/814-20200602-core-inconsistent-default-textfilter-settings
