CVE-2018-12711

2018-06-2619:29:00

Google

osv.dev

0.015 Low

EPSS

Percentile

87.1%

JSON

An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before 3.8.9. In some cases, the link of the current language might contain unescaped HTML special characters. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the current page URL.

CPENameOperatorVersion
joomla-cmseq2.5.2
joomla-cmseq3.6.0-beta2
joomla-cmseq3.2.3
joomla-cmseq3.7.1-rc2
joomla-cmseq3.2.1
joomla-cmseq3.8.4-rc
joomla-cmseq2.5.5
joomla-cmseq3.7.4-beta1
joomla-cmseq3.7.1
joomla-cmseq3.8.5-rc

Name	Operator	Version
joomla-cms	eq	2.5.2
joomla-cms	eq	3.6.0-beta2
joomla-cms	eq	3.2.3
joomla-cms	eq	3.7.1-rc2
joomla-cms	eq	3.2.1
joomla-cms	eq	3.8.4-rc
joomla-cms	eq	2.5.5
joomla-cms	eq	3.7.4-beta1
joomla-cms	eq	3.7.1
joomla-cms	eq	3.8.5-rc