CVE-2018-11325 An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and disp...
CriticalCVSS 9.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomla | < 3.8.8 | 3.8.8 |
References
- 104278 third-party-advisory vdb-entry
- 1040966 third-party-advisory vdb-entry
- developer.joomla.org vendor-advisory