Security Advisory

CVE-2017-5673

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-03-22 17:00:00

Last updated 2024-08-05 15:11:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php, crypsisb3/layouts/message/item/default.php, crypsisb3/layouts/message/item/top/default.php, and crypsisb3/layouts/message/item/bottom/default.php. This is fixed in 5.0.5.

← Browse all CVEs View on cve.org ↗