CVE-2018-6380

6.1 mediumEPSS 1.7%

Medium (6.1) in joomla joomla\!. EPSS 1.7% chance of exploitation in the next 30 days.

In Joomla! before 3.8.4, lack of escaping in the module chromes leads to XSS vulnerabilities in the module system.

Severity

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2018-01-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19