CVE-2018-11321

6.5 mediumEPSS 1.9%

An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-05-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

joomla:joomla\!

References

http://www.securityfocus.com/bid/104271
http://www.securitytracker.com/id/1040966
https://developer.joomla.org/security-centre/734-20180506-core-filter-field-in-com-fields-allows-remote-code-execution.html
http://www.securityfocus.com/bid/104271
http://www.securitytracker.com/id/1040966

Check your stack JSON