Unrated
In Joomla! before 3.8.4, lack of escaping in the module chromes leads to XSS vulnerabilities in the module system.
CVE-2018-6380
First seen on SecPulse
References
- advisory securityfocus.com
- advisory securitytracker.com
- advisory developer.joomla.org