CVE-2018-11326: Joomla!

Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack.

Affected products

• Joomla! Joomla!: before 3.8.8 (fixed in 3.8.8)

Published 2018-05-22. Last modified 2026-06-17.