- Project: Joomla!
- SubProject: CMS
- Severity: High
- Versions: 3.4.4 through 3.6.3
- Exploit type: Elevated Privileges
- Reported Date: 2016-October-21
- Fixed Date: 2016-October-25
- CVE Number: CVE-2016-8869
Description
Incorrect use of unfiltered data allows for users to register on a site with elevated privileges.
Affected Installs
Joomla! CMS versions 3.4.4 through 3.6.3
Solution
Upgrade to version 3.6.4
Contact
The JSST at the Joomla! Security Centre.
Reported By: Davide Tampellini