CVE-2018-6378

6.1 mediumEPSS 1.4%

Medium (6.1) in joomla joomla\!. EPSS 1.4% chance of exploitation in the next 30 days.

In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager.

Severity

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2018-05-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19