Description
An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen.
Remediation
References
Related Vulnerabilities
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3745)
WordPress Plugin Responsive Lightbox by dFactory Cross-Site Scripting (1.4.11)
WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (6.1.5)
WordPress Plugin WordPress Ad Widget Local File Inclusion (2.11.0)