[20180506] Filter field in com_fields allowed remote code execution

Inadequate filtering had allowed users authorized to create custom fields to manipulate the filtering options and inject an unvalidated option.

This vulnerability affects the following application versions:

• Joomla 3.7.0



• Joomla 3.7.0-rc1



• Joomla 3.7.0-rc2



• Joomla 3.7.0-rc3



• Joomla 3.7.0-rc4



• Joomla 3.7.1



• Joomla 3.7.1-rc1



• Joomla 3.7.1-rc2



• Joomla 3.7.2



• Joomla 3.7.3



• Joomla 3.7.3-rc1



• Joomla 3.7.3-rc2



• Joomla 3.7.4



• Joomla 3.7.4-rc1



• Joomla 3.7.5



• Joomla 3.8.0



• Joomla 3.8.0-rc1



• Joomla 3.8.1



• Joomla 3.8.1-rc



• Joomla 3.8.2



• Joomla 3.8.2-rc



• Joomla 3.8.3



• Joomla 3.8.3-rc



• Joomla 3.8.4



• Joomla 3.8.4-rc



• Joomla 3.8.4-rc2



• Joomla 3.8.5



• Joomla 3.8.5-rc



• Joomla 3.8.6



• Joomla 3.8.6-rc1



• Joomla 3.8.7



• Joomla 3.8.7-rc



• Joomla 3.8.8-rc