In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager.

Published May 22, 2018 · Updated Aug 5, 2024 · Assigned by mitre