CVE-2018-15882

CVE-2018-15882 is a critical vulnerability affecting Joomla! versions prior to 3.8.12, stemming from inadequate input validation in the InputFilter class that allows specially crafted PHAR files to bypass upload filters. With a CVSS score of 9.8, it presents a high-severity risk, enabling unauthenticated attackers to achieve complete compromise of confidentiality, integrity, and availability with low attack complexity. Despite its critical severity, there is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.