CVE-2018-12711 - An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before 3.8.9

Back Back to CVE browser

MEDIUM

An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before 3.8.9

Published Jun 26, 2018

6.1

MEDIUM

CVSS 3.0

EPSS 1.41%

Description

An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before 3.8.9. In some cases, the link of the current language might contain unescaped HTML special characters. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the current page URL.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://www.securityfocus.com/bid/104565
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041244
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://developer.joomla.org/security-centre/740-20180602-core-xss-vulnerability-in-language-switcher-module
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/104565		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041244		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://developer.joomla.org/security-centre/740-20180602-core-xss-vulnerability-in-language-switcher-module		x_refsource_CONFIRMVendor Advisory