CVE-2018-11328

MEDIUM · CVSS 4.7 EPSS 1.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-05-22 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-11328

Severity

MEDIUM

CVSS

4.7

EPSS

1.36%

Original Filing — NVD Description

An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances (a redirect issued with a URI containing a username and password when the Location: header cannot be used), a lack of escaping the user-info component of the URI could result in an XSS vulnerability.