Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-11326
An issue was discovered in Joomla Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack.