Joomla! Security Vulnerabilities and Issues — Joomla! CVE List

Lucene search

JoomlaJoomla!

4 matches found

CVE•added 2018/01/30 5:29 p.m.•65 views

CVE-2018-6377

In Joomla! before 3.8.4, inadequate input filtering in com_fields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox

6.1CVSS6AI score0.46615EPSS

CVE•added 2018/01/30 5:29 p.m.•62 views

CVE-2018-6380

In Joomla! before 3.8.4, lack of escaping in the module chromes leads to XSS vulnerabilities in the module system.

6.1CVSS6.2AI score0.0312EPSS

CVE•added 2018/01/30 5:29 p.m.•59 views

CVE-2018-6376

In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message.

9.8CVSS9.6AI score0.07734EPSS

CVE•added 2018/01/30 5:29 p.m.•53 views

CVE-2018-6379

In Joomla! before 3.8.4, inadequate input filtering in the Uri class (formerly JUri) leads to an XSS vulnerability.

6.1CVSS5.9AI score0.0312EPSS