Description
An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack.
Remediation
References
Related Vulnerabilities
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2007-2748)
Drupal Remote Code Execution Vulnerability (CVE-2020-13671)
GlassFish Use of Hard-coded Credentials Vulnerability (CVE-2018-14324)
WordPress Plugin Live Chat Unlimited Cross-Site Scripting (2.8.3)
WordPress Plugin BuddyPress Members Only Cross-Site Scripting (1.8.3)