UpHeron
All vulnerabilities

Servers and applications

CVE-2018-12711

An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before 3.8.9. In some cases, the link of the current language might contain unescaped HTML special characters. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the current page URL.

Severity
Medium 6.1
Published
26 Jun 2018
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Joomla!Servers and applications · cpe:a:joomla:joomla\!
  • From 1.6.0 up to 3.8.8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-12711
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-12711