Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-12711 - Vulnerability Database
Joomla

Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-12711

Medium
Reference: CVE-2018-12711
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-12711
Title: Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

An XSS issue was discovered in the language switcher module in Joomla 1.6.0 through 3.8.8 before 3.8.9. In some cases the link of the current language might contain unescaped HTML special characters. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the current page URL.