Description

In Joomla! before 3.8.4, lack of escaping in the module chromes leads to XSS vulnerabilities in the module system.

Remediation

References

CVE-2018-6380

Related Vulnerabilities

WordPress Plugin PublishPress Capabilities-User Role Access, Editor Permissions, Admin Menus Cross-Site Request Forgery (2.3.1)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5317)

WordPress Plugin Playbuzz Cross-Site Scripting (0.8.1)

PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5288)

WordPress Plugin Premmerce Wishlist for WooCommerce Security Bypass (1.1.2)

Severity

Medium

Classification

CVE-2018-6380 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities