Description

An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack.

Remediation

References

CVE-2018-11326

Related Vulnerabilities

WordPress Plugin Backup and Restore WordPress-WPBackItUp Multiple Vulnerabilities (1.9)

MySQL CVE-2019-2635 Vulnerability (CVE-2019-2635)

WordPress Plugin Redirection Cross-Site Request Forgery (1.1.3)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (1.7.2)

Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.4.8)

Severity

Medium

Classification

CVE-2018-11326 CWE-707 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities