Lucene search

K
joomlaOpen Source Matters, Inc.JOOMLA-740
HistoryMay 07, 2018 - 12:00 a.m.

[20180602] - Core - XSS vulnerability in language switcher module

2018-05-0700:00:00
Open Source Matters, Inc.
developer.joomla.org
8

0.015 Low

EPSS

Percentile

87.1%

In some cases the link of the current language might contain unescaped HTML special characters. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the current page url.

CPENameOperatorVersion
joomla! cmslt3.8.9

0.015 Low

EPSS

Percentile

87.1%