EUVD-2016-2011

Malware in sbrugna...

CVE-2016-11020

Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution...

PT-2020-7950

Name of the Vulnerable Software and Affected Versions: Kunena versions prior to 5.0.4 Description: The issue allows for XSS and potentially remote code execution due to the lack of restriction on avatar file extensions, which should be limited to gif, jpeg, jpg, and png. Recommendations: For...