medium6.1
CVE-2018-6378
In Joomla!
Impact
In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | before 3.8.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104268
- http://www.securitytracker.com/id/1040966
- https://developer.joomla.org/security-centre/737-20180509-core-xss-vulnerability-in-the-media-manager.html
- http://www.securityfocus.com/bid/104268
- http://www.securitytracker.com/id/1040966
- https://developer.joomla.org/security-centre/737-20180509-core-xss-vulnerability-in-the-media-manager.html