Description

In Joomla! before 3.8.4, inadequate input filtering in com_fields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox

Remediation

References

CVE-2018-6377

Related Vulnerabilities

WordPress Plugin Image Slider by Ays-Responsive Slider and Carousel SQL Injection (2.4.9)

WordPress Plugin Vmax Project Manager Local File Inclusion (1.1)

XOOPS Other Vulnerability (CVE-2005-2113)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13761)

WordPress Plugin Allow REL= and HTML in Author Bios Cross-Site Scripting (.1)

Severity

Medium

Classification

CVE-2018-6377 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities