Joomla Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2018-15882
An issue was discovered in Joomla before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload filter.