- Project: Joomla!
- SubProject: CMS
- Impact: Moderate
- Severity: Low
- Versions: 1.5.0 through 3.8.3
- Exploit type: XSS
- Reported Date: 2017-November-17
- Fixed Date: 2018-January-30
- CVE Number: CVE-2018-6379
Inadequate input filtering in the Uri class (formerly JUri) leads to a XSS vulnerability.
Joomla! CMS versions 1.5.0 through 3.8.3
Upgrade to version 3.8.4
The JSST at the Joomla! Security Centre.
Reported By: Octavian Cinciu