Joomla Improper Privilege Management Vulnerability - CVE-2018-17855
An issue was discovered in Joomla before 3.8.13. If an attacker gets access to the mail account of an user who can approve admin verifications in the registration process he can activate himself.