Kunena Kunena
6 CVEs affecting Kunena Kunena. Latest disclosed: 2020-02-25. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-11020 | Critical | 9.8 | 2020-02-25 | Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution. |
CVE-2017-5673 | Medium | 6.1 | 2017-03-22 | In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. Six files are affect… |
CVE-2019-15120 | Medium | 5.4 | 2019-08-16 | The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode. |
CVE-2014-9103 | | 2014-11-26 | Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote attackers to inject arbitrary web script or H… | |
CVE-2014-9102 | | 2014-11-26 | Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrary SQL commands via… | |
CVE-2012-4868 | | 2012-09-06 | SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id paramete… |