Joomla! < 3.8.8 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.8.8. It is, therefore, affected by a multiple vulnerabilities. Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's...

CVE-2018-6378

CVE-2018-6378 affects Joomla! Core prior to 3.8.8, where inadequate filtering of file and folder names in the media manager enables XSS vectors. Connected sources reference Joomla media manager XSS and related issues in versions up to 3.8.7 (and earlier), with remediation aligning to upgrading to...