CVE-2018-10727

2019-10-2919:15:15

Google

osv.dev

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

48.4%

JSON

Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header.

References

github.com/Fabrik/fabrik/issues/2033