Security Advisory

CVE-2016-11020

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-24 17:04:35

Last updated 2024-08-06 03:47:33

Assigner mitre

CVSS score not scored

State PUBLISHED

Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution.