Skip to content
OpenAdvisories
Medium · 4.8 CVE-2018-11326 EUVD-2022-3874GHSA-g3m5-vvj7-xrwv

Joomla! XSS Vulnerability

Published May 22, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist joomla/joomla-cms >= 3.0.0, < 3.8.8 3.8.8 GHSA-g3m5-vvj7-xrwv

References