CVE-2018-10727: Fabrikar Fabrik

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header.

Affected products

• Fabrikar Fabrik: up to and including 3.8.1

Published 2019-10-29. Last modified 2026-06-17.