Unrated
In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager.
CVE-2018-6378
First seen on SecPulse
References
- advisory securityfocus.com
- advisory securitytracker.com
- advisory developer.joomla.org