CVE-2018-10727

Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-10-29

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Fabrik (Fabrikar)

References

• https://github.com/Fabrik/fabrik/issues/2033