CVE-2018-15880

MEDIUM

Joomla! < 3.8.12 - Stored Cross-Site Scripting in User Profile Page

Title source: llm

An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile page could lead to a stored XSS attack.

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

Vendor Advisory x_refsource_confirm

Third Party Advisory vdb-entry x_refsource_sectrack

CVSS v3 5.4

EPSS 0.0010

EPSS Percentile 27.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (1)

joomla/joomla\! < 3.8.12

Published Aug 29, 2018

Tracked Since Feb 18, 2026