Joomla! < 3.8.8 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.8.8. It is, therefore, affected by a multiple vulnerabilities. Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's...

CVE-2018-11321

CVE-2018-11321 affects Joomla! Core via the com_fields component. The issue arises from inadequate filtering in the field filtering logic, allowing authorized users who create custom fields to manipulate filtering options and inject an unvalidated option, potentially enabling remote code executio...

CVE-2018-11321

An issue was discovered in comfields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option...