Description
An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2007-0273 Vulnerability (CVE-2007-0273)
WordPress Plugin SocialGrid 'default_services' Parameter Cross-Site Scripting (2.3)
WordPress Plugin WPGlobus Translate Options Cross-Site Scripting (2.1.0)
MySQL CVE-2017-3637 Vulnerability (CVE-2017-3637)
Contao Improper Access Control Vulnerability (CVE-2025-57758)