← All advisories

Medium severity4.8NVD Advisory· Published Apr 26, 2019· Updated Jun 17, 2026

CVE-2018-18276

CVE-2018-18276

Description

XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Profilesinferred
Range: = 1.5
Package: https://wordpress.org/plugins/profiles
Joomla/ProFilesllm-create
Range: 1.5

Patches

Vulnerability mechanics

References

1

www.cinquino.eu/ProFiles%201.5%20Free%20Version%20Component%20Xss.htmnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.