CVE-2018-18276: Profiles Project Profiles

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel.

Affected products

• Profiles Project Profiles: version 1.5 only

Published 2019-04-26. Last modified 2026-06-17.