CVE-2018-12711

An XSS issue was discovered in the language switcher module in Joomla!

published June 26, 2018

CVSS
—
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before 3.8.9. In some cases, the link of the current language might contain unescaped HTML special characters. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the current page URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01413 · 72.5th percentile
Published
2018-06-26T19:00Z
EPSS history
Timeline
  • 26 JUN 19:00Z
    An XSS issue was discovered in the language switcher module in Joomla!
    cvelistv5